Stefan Metzmacher 84027af3ab CVE-2015-5370: s3:rpc_server: just call pipe_auth_generic_bind() in api_pipe_bind_req() ...

pipe_auth_generic_bind() does all the required checks already
and an explicit DCERPC_AUTH_TYPE_NONE is not supported.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11344

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Günther Deschner <gd@samba.org>

2016-04-12 19:25:31 +02:00

..

dfs

Correctly check for errors in strlower_m() returns.

2012-08-09 12:08:18 -07:00

dssetup

Correctly check for errors in strlower_m() returns.

2012-08-09 12:08:18 -07:00

echo

Covert all uint32/16/8 to _t in source3/rpc_server.

2015-05-15 19:31:24 +02:00

epmapper

s3-rpc_server: Fix inteface typo.

2015-06-04 03:51:29 +02:00

eventlog

Covert all uint32/16/8 to _t in source3/rpc_server.

2015-05-15 19:31:24 +02:00

fss

s3: Filenames: Add uint32_t flags parameter to synthetic_smb_fname().

2016-03-24 22:57:16 +01:00

initshutdown

s3: include ntdomain.h before including generated srv_ headers.

2011-05-02 15:03:44 +02:00

lsa

Fix various spelling errors

2015-11-06 13:43:45 +01:00

mdssvc

mdssvc/sparql_parser.c: use HAVE___ATTRIBUTE__ instead of __GNUC__

2016-03-24 15:13:15 +01:00

netlogon

CVE-2016-2111: s3:rpc_server/netlogon: check NTLMv2_RESPONSE values for SEC_CHAN_WKSTA

2016-04-12 19:25:24 +02:00

ntsvcs

s3-rpc_server: Make it possible to use more rpc exceptions.

2012-07-06 10:00:56 +02:00

samr

CVE-2016-2118: s3:rpc_server/samr: allow _samr_ValidatePassword only with PRIVACY...

2016-04-12 19:25:28 +02:00

spoolss

spoolss: handle SetPrinter for info level 4

2015-09-01 03:33:13 +02:00

srvsvc

s3/rpc_server/srvsvc/srv_srvsvc_nt.c: change snum to signed int

2016-03-04 21:24:14 +01:00

svcctl

Covert all uint32/16/8 to _t in source3/rpc_server.

2015-05-15 19:31:24 +02:00

winreg

Covert all uint32/16/8 to _t in source3/rpc_server.

2015-05-15 19:31:24 +02:00

wkssvc

param: rename lp function and variable from 'passwordserver' to 'password_server'

2014-02-07 16:19:10 -08:00

dcesrv_auth_generic.c

s3-rpc_server: Return the status code from gensec.

2014-04-24 11:21:05 +02:00

dcesrv_auth_generic.h

s3-rpc_server Remove unused function auth_generic_server_start()

2012-02-23 16:14:18 +11:00

epmd.c

s3: Move call to prctl_set_comment to reinit_after_fork

2015-09-24 08:00:16 +02:00

fssd.c

fssd: Remove reference to procid_self()

2015-10-19 12:09:10 +02:00

lsasd.c

s3: Move call to prctl_set_comment to reinit_after_fork

2015-09-24 08:00:16 +02:00

mdssd.c

s3:rpc_server: make it possible to build mdssvc as a shared module

2016-02-21 22:28:41 +01:00

rpc_config.c

s3-mdssvc: add Spotlight RPC stubs

2015-07-07 17:34:28 +02:00

rpc_config.h

s3-mdssvc: add mdssd RPC service daemon for mdssvc

2015-07-07 17:34:28 +02:00

rpc_contexts.c

s3-rpc_server: Move the context functions to own file.

2011-06-01 12:02:15 +02:00

rpc_contexts.h

s3-rpc_server: Move the context functions to own file.

2011-06-01 12:02:15 +02:00

rpc_ep_register.c

s3:rpc_server: make use of dcerpc_binding_set_abstract_syntax()

2014-02-13 11:54:16 +01:00

rpc_ep_register.h

s3-rpc_server: Use binding vector in rpc_ep_try_register().

2011-08-01 08:50:35 +02:00

rpc_handles.c

Convert all uses of uint32/16/8 to _t in source3/rpc_server.

2015-05-12 01:32:12 +02:00

rpc_modules.c

s3:rpc_server: allow building RPC services as shared modules

2016-02-21 19:21:17 +01:00

rpc_modules.h

s3:rpc_server: allow building RPC services as shared modules

2016-02-21 19:21:17 +01:00

rpc_ncacn_np.c

CVE-2016-2118: s3:rpc_server: make use of "allow dcerpc auth level connect"

2016-04-12 19:25:27 +02:00

rpc_ncacn_np.h

s3-rpc_server: Remove obsolete make_internal_rpc_pipe().

2013-10-29 16:29:16 +01:00

rpc_pipes.h

CVE-2016-2118: s3:rpc_server: make use of "allow dcerpc auth level connect"

2016-04-12 19:25:27 +02:00

rpc_server.c

lib: directory_create_or_exist() does not use "uid" parameter

2014-07-28 22:04:13 +02:00

rpc_server.h

s3-rpc_server: Remove ncalrpc_as_system from make_server_pipes_struct().

2014-04-24 13:39:10 +02:00

rpc_service_setup.c

s3:rpc_server: make it possible to build mdssvc as a shared module

2016-02-21 22:28:41 +01:00

rpc_service_setup.h

s3:rpc_server: allow building RPC services as shared modules

2016-02-21 19:21:17 +01:00

rpc_sock_helper.c

s3-rpc_server: fix rpc_create_tcpip_sockets() processing of interfaces.

2015-04-30 15:14:27 +02:00

rpc_sock_helper.h

s3-rpc_server: Add RPC socket helper functions.

2011-08-01 08:50:35 +02:00

srv_access_check.c

Covert all uint32/16/8 to _t in source3/rpc_server.

2015-05-15 19:31:24 +02:00

srv_access_check.h

Covert all uint32/16/8 to _t in source3/rpc_server.

2015-05-15 19:31:24 +02:00

srv_pipe_hnd.c

rpc_server: change unsupported pipe error

2014-03-05 16:31:42 +01:00

srv_pipe_hnd.h

s3/rpc_server: don't unmarshall PDUs twice

2013-12-11 22:24:31 +01:00

srv_pipe_internal.h

s3-rpc: Seperate rpc_srv_register for plain connection.

2010-06-04 12:12:43 -04:00

srv_pipe_register.c

s3-rpc_server: remove proto of nonexisting function

2011-05-02 15:03:43 +02:00

srv_pipe_register.h

s3-proto: move rpc_srv_register protos and structs to town headerfile.

2011-05-02 15:03:43 +02:00

srv_pipe.c

CVE-2015-5370: s3:rpc_server: just call pipe_auth_generic_bind() in api_pipe_bind_req()

2016-04-12 19:25:31 +02:00

srv_pipe.h

s3-rpc_server: (re)move last globally included rpc_server prototypes.

2011-05-02 16:05:31 +02:00

wscript_build

s3:rpc_server: make it possible to build mdssvc as a shared module

2016-02-21 22:28:41 +01:00