Description
The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "client ldap sasl wrapping" setting, which allows man-in-the-middle attackers to perform LDAP protocol-downgrade attacks by modifying the client-server data stream.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No solution or workaround provided in the CVE record.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-3548-1 | samba security update |
Ubuntu USN |
USN-2950-1 | Samba vulnerabilities |
References
History
No history.
Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2024-08-05T23:17:50.593Z
Reserved: 2016-01-29T00:00:00.000Z
Link: CVE-2016-2112
No data.
Status : Modified
Published: 2016-04-25T00:59:03.097
Modified: 2026-06-17T00:43:28.323
Link: CVE-2016-2112
OpenCVE Enrichment
No data.
Debian DSA
Ubuntu USN