NVD

Id
18407  
Name
CVE-2016-2110  
Description
The NTLMSSP authentication implementation in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 allows man-in-the-middle attackers to perform protocol-downgrade attacks by modifying the client-server data stream to remove application-layer flags or encryption settings, as demonstrated by clearing the NTLMSSP_NEGOTIATE_SEAL or NTLMSSP_NEGOTIATE_SIGN option to disrupt LDAP security.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-04-24  
Modified Date
2016-12-30  
Seq
2016-2110  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
102047 18407 CVE-2016-2110 http://badlock.org/  View
102048 18407 CVE-2016-2110 FEDORA-2016-be53260726  View
102049 18407 CVE-2016-2110 FEDORA-2016-48b3761baa  View
102050 18407 CVE-2016-2110 FEDORA-2016-383fce04e2  View
102051 18407 CVE-2016-2110 SUSE-SU-2016:1022  View
102052 18407 CVE-2016-2110 SUSE-SU-2016:1023  View
102053 18407 CVE-2016-2110 SUSE-SU-2016:1024  View
102054 18407 CVE-2016-2110 openSUSE-SU-2016:1025  View
102055 18407 CVE-2016-2110 SUSE-SU-2016:1028  View
102056 18407 CVE-2016-2110 openSUSE-SU-2016:1064  View
102057 18407 CVE-2016-2110 SUSE-SU-2016:1105  View
102058 18407 CVE-2016-2110 openSUSE-SU-2016:1106  View
102059 18407 CVE-2016-2110 openSUSE-SU-2016:1107  View
102060 18407 CVE-2016-2110 openSUSE-SU-2016:1440  View
102061 18407 CVE-2016-2110 RHSA-2016:0611  View
102062 18407 CVE-2016-2110 RHSA-2016:0612  View
102063 18407 CVE-2016-2110 RHSA-2016:0613  View
102064 18407 CVE-2016-2110 RHSA-2016:0614  View
102065 18407 CVE-2016-2110 RHSA-2016:0618  View
102066 18407 CVE-2016-2110 RHSA-2016:0619  View
102067 18407 CVE-2016-2110 RHSA-2016:0620  View
102068 18407 CVE-2016-2110 RHSA-2016:0621  View
102069 18407 CVE-2016-2110 RHSA-2016:0623  View
102070 18407 CVE-2016-2110 RHSA-2016:0624  View
102071 18407 CVE-2016-2110 RHSA-2016:0625  View
102072 18407 CVE-2016-2110 DSA-3548  View
102073 18407 CVE-2016-2110 http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html  View
102074 18407 CVE-2016-2110 1035533  View
102075 18407 CVE-2016-2110 SSA:2016-106-02  View
102076 18407 CVE-2016-2110 USN-2950-1  View
102077 18407 CVE-2016-2110 USN-2950-2  View
102078 18407 CVE-2016-2110 USN-2950-3  View
102079 18407 CVE-2016-2110 USN-2950-4  View
102080 18407 CVE-2016-2110 USN-2950-5  View
102081 18407 CVE-2016-2110 https://bto.bluecoat.com/security-advisory/sa122  View
102082 18407 CVE-2016-2110 https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05087821  View
102083 18407 CVE-2016-2110 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05082964  View
102084 18407 CVE-2016-2110 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399  View
102085 18407 CVE-2016-2110 GLSA-201612-47  View
102086 18407 CVE-2016-2110 https://www.samba.org/samba/history/samba-4.2.10.html  View
102087 18407 CVE-2016-2110 https://www.samba.org/samba/latest_news.html#4.4.2  View
102088 18407 CVE-2016-2110 https://www.samba.org/samba/security/CVE-2016-2110.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1616 JVNDB-2016-002389 Samba の NTLMSSP 認証の実装におけるプロトコルダウングレード攻撃を実行される脆弱性 Samba の NTLMSSP 認証の実装には、プロトコルダウングレード攻撃を実行される脆弱性が存在します。 CVE-2016-2110 88616 CVE-2016-2110 18407 4.3 5.9 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002389.html 2016-04-12 2016-09-30 View