1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-25 23:21:54 +03:00
samba-mirror/nsswitch
Stefan Metzmacher 2063692367 CVE-2016-2110: winbindd: add new_spnego to the WINBINDD_CCACHE_NTLMAUTH response
We don't need to change the protocol version because:

1. An old client may provide the "initial_blob"
   (which was and is still ignored when going
   via the wbcCredentialCache() function)
   and the new winbindd won't use new_spnego.

2. A new client will just get a zero byte
   from an old winbindd. As it uses talloc_zero() to
   create struct winbindd_response.

3. Changing the version number would introduce problems
   with backports to older Samba versions.

New clients which are capable of using the new_spnego field
will use "negotiate_blob" instead of "initial_blob".

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11644

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Günther Deschner <gd@samba.org>
2016-04-12 19:25:22 +02:00
..
libwbclient CVE-2016-2110: winbindd: add new_spnego to the WINBINDD_CCACHE_NTLMAUTH response 2016-04-12 19:25:22 +02:00
tests nsswitch: Extend idmap_rfc2307 testcase for reverse lookup 2015-06-05 01:24:32 +02:00
nsstest.c Fix bug 10025 - Lack of Sanity Checking in calls to malloc()/calloc(). 2013-07-17 16:12:19 -07:00
nsstest.h nsstest: Relicense header file to LGPLv3+ 2009-06-04 20:15:31 +02:00
pam_winbind.c pam_winbind: Avoid a use of sprintf 2016-03-31 20:30:11 +02:00
pam_winbind.h pam_winbind: Create and use a wbclient context 2016-03-25 17:45:24 +01:00
wb_common.c Fix various spelling errors 2015-11-06 13:43:45 +01:00
wb_reqtrans.c nsswitch: make wb_reqtrans a common subsystem. 2011-02-17 00:52:42 +01:00
wb_reqtrans.h nsswitch: make wb_reqtrans a common subsystem. 2011-02-17 00:52:42 +01:00
wbinfo.c wbinfo: Add --unix-ids-to-sids 2016-02-22 20:29:15 +01:00
winbind_client.h Make winbind client library thread-safe by adding context 2015-03-10 00:50:09 +01:00
winbind_krb5_locator.c krb5_locator: Slightly simplify code 2014-02-20 11:43:08 -08:00
winbind_nss_aix.c nsswitch: winbind_nss_aix: Remove all uses of strcpy. 2016-03-22 04:38:24 +01:00
winbind_nss_config.h Remove special socket_wrapper code. 2014-04-17 14:56:06 +02:00
winbind_nss_freebsd.c nss_winbind: add getgroupmembership for FreeBSD 2014-10-20 12:20:04 +02:00
winbind_nss_hpux.h s3: readd h_errno struct member but rename it 2010-06-10 23:22:49 +02:00
winbind_nss_irix.c
winbind_nss_irix.h
winbind_nss_linux.c nsswitch: linux: Remove use of strcpy(). 2016-03-22 04:38:24 +01:00
winbind_nss_linux.h
winbind_nss_netbsd.c nss_netbsd: Remove unimplemented prototypes 2016-02-11 04:43:53 +01:00
winbind_nss_netbsd.h
winbind_nss_solaris.c nsswitch: winbind_nss_solaris.c: Remove unused macro containing strcpy. 2016-03-22 07:59:35 +01:00
winbind_nss_solaris.h s3-nsswitch: Fix warnings on Solaris. 2012-02-06 18:28:53 +01:00
winbind_nss.h
winbind_struct_protocol.h CVE-2016-2110: winbindd: add new_spnego to the WINBINDD_CCACHE_NTLMAUTH response 2016-04-12 19:25:22 +02:00
wins_freebsd.c nss_wins: add module for FreeBSD 2015-09-11 00:34:30 +02:00
wins.c nss_wins: Use libwbclient to query wins server 2015-10-26 21:23:21 +01:00
wscript_build nss_wins: Use libwbclient to query wins server 2015-10-26 21:23:21 +01:00
wscript_configure nsswitch: Add waf tests for solaris special cases 2012-09-26 11:50:10 +02:00