Jeremy Allison 9a3ee861e4 CVE-2019-3880 s3: rpc: winreg: Remove implementations of SaveKey/RestoreKey. ...

The were not using VFS backend calls and could only work
locally, and were unsafe against symlink races and other
security issues.

If the incoming handle is valid, return WERR_BAD_PATHNAME.

[MS-RRP] states "The format of the file name is implementation-specific"
so ensure we don't allow this.

As reported by Michael Hanselmann.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13851

Signed-off-by: Jeremy Allison <jra@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

2019-04-05 09:14:54 +02:00

..

auth

s3:auth_winbind: ignore a missing winbindd as NT4 PDC/BDC without trusts

2019-01-09 15:55:39 +01:00

build

…

client

s3:client: Fix smbspool device uri handling

2019-03-26 07:49:18 +00:00

exports

…

groupdb

Correct "errror" typos.

2017-02-22 08:26:22 +01:00

include

s3:passdb: add create_builtin_guests()

2019-03-12 11:25:43 +00:00

intl

lib: Give util_paths.c its own header

2017-06-24 01:21:10 +02:00

lib

s3:lib: Fix the debug message for adding cache entries.

2019-04-02 09:09:55 +00:00

libads

libads: Fix the build --without-ads

2018-04-19 11:40:11 +02:00

libgpo/gpext

gpo: fix the building of gpext to only once

2017-11-20 21:41:14 +01:00

libnet

libnet_join: fix "net rpc oldjoin"

2017-11-18 00:09:16 +01:00

librpc

smbd: Fix channel sequence number checks for long-running requests

2018-01-14 10:26:05 +01:00

libsmb

s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection

2019-02-01 11:32:46 +01:00

locale

pam_winbind: initial Turkish translation

2017-11-15 13:52:05 +01:00

locking

smbd: Fix a memleak in async search ask sharemode

2018-09-05 13:31:41 +02:00

modules

vfs_ceph: remove ceph_fallocate/ceph_ftruncate fallback

2019-03-05 13:01:15 +00:00

nmbd

lib: Remove unused serverid.tdb

2017-12-05 04:58:26 +01:00

param

s3:loadparm: reinit_globals in lp_load_with_registry_shares()

2018-10-09 11:29:22 +02:00

passdb

passdb: Update ABI to 0.27.2

2019-03-12 11:25:43 +00:00

printing

printing: check lp_load_printers() prior to pcap cache update

2019-02-21 12:31:46 +01:00

profile

s3-profile: reduce dependencies of smbprofile.h

2016-03-28 20:45:16 +02:00

registry

s3:registry: Fix buffer truncation issues issues with gcc8

2018-06-25 21:47:19 +02:00

rpc_client

s3:cli_lsarpc: use talloc_zero_array() in dcerpc_lsa_lookup_names_generic()

2018-02-27 16:00:11 +01:00

rpc_server

CVE-2019-3880 s3: rpc: winreg: Remove implementations of SaveKey/RestoreKey.

2019-04-05 09:14:54 +02:00

rpcclient

rpcclient: Use cmdline_messaging_context

2018-10-09 11:29:23 +02:00

script

s3:script: Fix jobid check in test_smbspool.sh

2019-03-26 07:49:17 +00:00

selftest

torture: Add tests for idmap cache

2019-03-12 11:25:42 +00:00

services

Update smbrun to allow for settings environment variables.

2016-10-13 04:26:26 +02:00

smbd

s3: smbd: filenames - ensure we replace the missing '/' if we error in an intermediate POSIX path.

2019-03-05 07:39:29 +00:00

torture

torture: Add tests for idmap cache

2019-03-12 11:25:42 +00:00

utils

s3:utils/smbget fix recursive download with empty source directories

2019-01-07 15:56:31 +01:00

web

…

winbindd

winbind: Use idmap_cache_find_xid2sid

2019-03-12 11:25:43 +00:00

.clang_complete

lib: Remove tdb_compat

2015-03-17 11:30:52 +01:00

.dmallocrc

…

.indent.pro

…

Doxyfile

…

mainpage.dox

…

smbadduser.in

…

wscript

s3:waf: Fix the detection of makdev() macro on Linux

2019-03-28 17:42:25 +00:00

wscript_build

passdb: Update ABI to 0.27.2

2019-03-12 11:25:43 +00:00

wscript_configure_system_ncurses

Transition to waf 1.8: wrapped conf.check_cfg

2015-03-16 03:00:07 +01:00