Stefan Metzmacher 521316d749 CVE-2016-2118: s4:rpc_server/samr: allow _samr_ValidatePassword only with PRIVACY... ... This requires transport encryption. BUG: https://bugzilla.samba.org/show_bug.cgi?id=11616 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Günther Deschner <gd@samba.org>		2016-04-12 19:25:28 +02:00
..
backupkey	CVE-2016-2118: s4:rpc_server/backupkey: require DCERPC_AUTH_LEVEL_PRIVACY	2016-04-12 19:25:27 +02:00
browser
common	s4:rpc_server: dcesrv_generic_session_key should only work on local transports	2016-03-10 10:15:21 +01:00
dnsserver	CVE-2016-2118: s4:rpc_server/dnsserver: require at least DCERPC_AUTH_LEVEL_INTEGRITY	2016-04-12 19:25:27 +02:00
drsuapi	CVE-2016-2118: s4:rpc_server/drsuapi: require DCERPC_AUTH_LEVEL_PRIVACY	2016-04-12 19:25:27 +02:00
echo	CVE-2016-2118: s4:rpc_server/rpcecho: allow DCERPC_AUTH_LEVEL_CONNECT by default	2016-04-12 19:25:27 +02:00
epmapper	CVE-2016-2118: s4:rpc_server/epmapper: allow DCERPC_AUTH_LEVEL_CONNECT by default	2016-04-12 19:25:27 +02:00
eventlog
lsa	CVE-2016-2118: s4:rpc_server/lsa: reject DCERPC_AUTH_LEVEL_CONNECT by default	2016-04-12 19:25:27 +02:00
netlogon	CVE-2016-2118: s4:rpc_server/netlogon: reject DCERPC_AUTH_LEVEL_CONNECT by default	2016-04-12 19:25:27 +02:00
remote	s4:rpc_server/remote: use dcerpc_binding_set_*() in remote_op_bind()	2014-02-13 11:54:17 +01:00
samr	CVE-2016-2118: s4:rpc_server/samr: allow _samr_ValidatePassword only with PRIVACY...	2016-04-12 19:25:28 +02:00
spoolss	Fix various spelling errors	2015-11-06 13:43:45 +01:00
srvsvc	lib/param: handle non-constant strings properly by passing in a memory context	2014-02-20 10:11:06 +13:00
unixinfo	dcesrv_unixinfo: No wbc_context required	2014-03-05 16:33:21 +01:00
winreg
wkssvc
dcerpc_server.c	CVE-2016-2118: s4:rpc_server: make use of "allow dcerpc auth level connect"	2016-04-12 19:25:27 +02:00
dcerpc_server.h	CVE-2016-2118: s4:rpc_server: make use of "allow dcerpc auth level connect"	2016-04-12 19:25:27 +02:00
dcerpc_server.pc.in	dcerpc_server: Add 'modulesdir' variable to pkg-config file.	2012-02-23 16:26:25 +01:00
dcesrv_auth.c	s4:rpc_server: require access to the machine account credentials	2016-03-17 17:17:16 +01:00
dcesrv_mgmt.c	CVE-2016-2118: s4:rpc_server/mgmt: allow DCERPC_AUTH_LEVEL_CONNECT by default	2016-04-12 19:25:27 +02:00
handles.c	libndr: Rename policy_handle_empty to ndr_policy_handle_empty.	2012-03-20 13:54:07 +01:00
service_rpc.c	s4:rpc_server: ignore ncacn_http endpoints for now	2014-09-22 23:09:08 +02:00
wscript_build	s4-rpc_server: Add a GnuTLS based backupkey implementation	2015-12-10 08:49:20 +01:00