Joseph Sutton 1cfaa078ff CVE-2023-0614 s4-dsdb: Treat confidential attributes as unindexed ...

In the unlikely case that someone adds a confidential indexed attribute
to the schema, LDAP search expressions on that attribute could disclose
information via timing differences. Let's not use the index for searches
on confidential attributes.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15270

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

2023-03-20 10:03:38 +01:00

..

ldb_modules

CVE-2023-0614 s4-dsdb: Treat confidential attributes as unindexed

2023-03-20 10:03:38 +01:00

cracknames.c

CVE-2020-25722 s4/cracknames: add comment pointing to samldb spn handling

2021-11-09 19:45:33 +00:00

samdb_privilege.c

s4-auth Remove event context from privilage database handling

2010-12-21 15:10:38 +11:00

samdb.c

Do not create an empty DB when accessing a sam.ldb

2020-11-26 06:52:41 +00:00

samdb.h

CVE-2023-0614 ldb: Prevent disclosure of confidential attributes

2023-03-20 10:03:38 +01:00