Andrew Bartlett 906aa7ddb8 CVE-2020-10700: dsdb: Do not permit the ASQ control for the GUID search in paged_results ...

ASQ is a very strange control and a BASE search can return multiple results
that are NOT the requested DN, but the DNs pointed to by it!

Thanks to Andrei Popa <andrei.popa@next-gen.ro> for finding,
reporting and working with us to diagnose this issue!

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14331

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Gary Lockyer <gary@catalyst.net.nz>

Autobuild-User(master): Karolin Seeger <kseeger@samba.org>
Autobuild-Date(master): Mon May  4 10:14:28 UTC 2020 on sn-devel-184

2020-05-04 10:14:28 +00:00

..

common

Remove unnecessary/incorrect talloc_steal() calls

2020-03-05 18:40:16 +00:00

dns

s4-dns: Deprecate BIND9_FLATFILE and remove "rndc command"

2019-08-22 21:24:00 +00:00

kcc

CVE-2019-19344 kcc dns scavenging: Fix use after free in dns_tombstone_records_zone

2020-01-21 11:38:38 +00:00

repl

messaging4: Pass fds to messaging handlers

2019-09-18 20:10:24 +00:00

samdb

CVE-2020-10700: dsdb: Do not permit the ASQ control for the GUID search in paged_results

2020-05-04 10:14:28 +00:00

schema

source4/dsdb/schema/schema_description.c: typo fixes

2019-10-31 00:43:37 +00:00

tests/python

CVE-2020-10700: dsdb: Add test for ASQ and ASQ in combination with paged_results

2020-05-04 08:19:41 +00:00

pydsdb.c

py3: Remove #define PyInt_FromLong PyLong_FromLong

2020-03-23 19:12:43 +00:00

samdb.pc.in

s4-pkgconfig: add @LIB_RPATH@ to our link flags

2010-12-08 12:46:00 +01:00

wscript_build

build: Remove bld.gen_python_environments()

2019-03-21 04:06:14 +00:00