Stefan Metzmacher 8cd1a2a118 CVE-2016-2110: auth/ntlmssp: implement gensec_ntlmssp_may_reset_crypto() ...

[MS-SPNG] requires the NTLMSSP RC4 states to be reset after
the SPNEGO exchange with mechListMic verification (new_spnego).

The 'reset_full' parameter is needed to support the broken
behavior that windows only resets the RC4 states but not the
sequence numbers. Which means this functionality is completely
useless... But we want to work against all windows versions...

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11644

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Günther Deschner <gd@samba.org>

2016-04-12 19:25:23 +02:00

..

gensec_ntlmssp_server.c

CVE-2016-2110: auth/ntlmssp: don't let ntlmssp_handle_neg_flags() change ntlmssp_state->use_ntlmv2

2016-04-12 19:25:22 +02:00

gensec_ntlmssp.c

auth/ntlmssp: GENSEC_FEATURE_SIGN_PKT_HEADER is always supported

2014-01-07 00:27:11 +01:00

ntlmssp_client.c

CVE-2016-2110: auth/ntlmssp: call ntlmssp_sign_init if we provide GENSEC_FEATURE_SIGN

2016-04-12 19:25:23 +02:00

ntlmssp_ndr.c

ntlmssp: when pulling messages it is important to clear memory first.

2016-02-04 09:29:16 +01:00

ntlmssp_ndr.h

ntlmssp: Move ntlmssp code to auth/ntlmssp

2011-10-18 13:13:31 +11:00

ntlmssp_private.h

CVE-2016-2110: auth/ntlmssp: let ntlmssp_handle_neg_flags() return NTSTATUS

2016-04-12 19:25:22 +02:00

ntlmssp_server.c

CVE-2016-2110: auth/ntlmssp: call ntlmssp_sign_init if we provide GENSEC_FEATURE_SIGN

2016-04-12 19:25:23 +02:00

ntlmssp_sign.c

CVE-2016-2110: auth/ntlmssp: implement gensec_ntlmssp_may_reset_crypto()

2016-04-12 19:25:23 +02:00

ntlmssp_util.c

CVE-2016-2110: auth/ntlmssp: don't let ntlmssp_handle_neg_flags() change ntlmssp_state->use_ntlmv2

2016-04-12 19:25:22 +02:00

ntlmssp.c

CVE-2016-2110: auth/ntlmssp: implement gensec_ntlmssp_may_reset_crypto()

2016-04-12 19:25:23 +02:00

ntlmssp.h

CVE-2016-2110: auth/ntlmssp: implement gensec_ntlmssp_may_reset_crypto()

2016-04-12 19:25:23 +02:00

wscript_build

auth/ntlmssp: implement GENSEC_FEATURE_NTLM_CCACHE

2016-03-10 06:52:28 +01:00