1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-10 01:18:15 +03:00
samba-mirror/source4
Joseph Sutton 003f6c1611 CVE-2023-0225 s4-acl: Don't return early if dNSHostName element has no values
This early return would mistakenly allow an unprivileged user to delete
the dNSHostName attribute by making an LDAP modify request with no
values. We should no longer allow this.

Add or replace operations with no values and no privileges are
disallowed.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15276

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-03-20 10:04:32 +01:00
..
auth s4-auth: fix sam test binary ntstatus include path 2022-12-16 21:35:45 +00:00
cldap_server cldap_server: Align integer types 2022-12-12 21:16:33 +00:00
client s4:client: Fix shellcheck errors in test_smbclient.sh 2022-08-22 14:20:36 +00:00
cluster dbwrap: Remove calls to loadparm 2018-04-24 01:53:19 +02:00
dns_server dns_server: Use talloc_asprintf_addbuf() in b9_format() 2022-12-14 04:32:34 +00:00
dsdb CVE-2023-0225 s4-acl: Don't return early if dNSHostName element has no values 2023-03-20 10:04:32 +01:00
echo_server s4: rename source4/smbd/ to source4/samba/ 2020-11-27 10:07:18 +00:00
include lib: Remove smb_threads from includes.h 2022-04-26 21:41:29 +00:00
kdc CVE-2022-37966 s4:kdc: apply restrictions of "kdc supported enctypes" 2022-12-13 13:07:30 +00:00
ldap_server s4:ldap_server: let ldapsrv_call_writev_start use conn_idle_time to limit the time 2022-10-19 17:13:39 +00:00
lib s4:lib/events: let s4_event_context_init() use samba_tevent_context_init() 2023-01-18 16:26:36 +00:00
libcli s3-librpc: add ads.idl and convert ads_struct to talloc. 2022-12-16 20:38:32 +00:00
libnet s4:libnet: correctly handle gnutls_pbkdf2() errors 2022-12-14 13:35:20 +00:00
librpc s3-librpc: add ads.idl and convert ads_struct to talloc. 2022-12-16 20:38:32 +00:00
nbt_server lib: Remove idtree from samba_util.h 2023-01-10 00:28:37 +00:00
ntp_signd s4: rename source4/smbd/ to source4/samba/ 2020-11-27 10:07:18 +00:00
ntvfs lib: Remove idtree from samba_util.h 2023-01-10 00:28:37 +00:00
param python: whitespace fixes 2022-10-03 20:03:32 +00:00
rpc_server s4-drsuapi: Give an error that matches windows on destination_dsa_guid lookup failure 2023-02-01 16:30:11 +00:00
samba Happy New Year 2023! 2023-01-01 00:24:02 +00:00
script s4:script: Fix shellcheck errors in find_unused_options.sh 2022-08-22 14:20:36 +00:00
scripting samba-tool: binary uses samba_tool function 2022-09-08 22:34:36 +00:00
selftest CVE-2023-0225 pytest/acl: test deleting dNSHostName as unprivileged user 2023-03-20 10:04:32 +01:00
setup CVE-2023-0614 ldb: Prevent disclosure of confidential attributes 2023-03-20 10:03:50 +01:00
smb_server lib: Remove idtree from samba_util.h 2023-01-10 00:28:37 +00:00
torture CVE-2023-0614 ldb: Make use of ldb_filter_attrs_in_place() 2023-03-20 10:03:50 +01:00
utils s4:utils: Fix shellcheck errors in test_samba_tool.sh 2022-08-22 20:35:36 +00:00
winbind CVE-2022-32746 ldb: Make use of functions for appending to an ldb_message 2022-07-27 10:52:36 +00:00
wrepl_server s4: rename source4/smbd/ to source4/samba/ 2020-11-27 10:07:18 +00:00
.clang_complete
.valgrind_suppressions
wscript_build s4:client: Migrate cifsdd to new cmdline option parser 2021-06-16 00:34:38 +00:00