NVD

Id
18408  
Name
CVE-2016-2111  
Description
The NETLOGON service in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2, when a domain controller is configured, allows remote attackers to spoof the computer name of a secure channel"s endpoint, and obtain sensitive session information, by running a crafted application and leveraging the ability to sniff network traffic, a related issue to CVE-2015-0005.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
5.5  
CVSS Vector
(AV:A/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-04-24  
Modified Date
2016-12-30  
Seq
2016-2111  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
102089 18408 CVE-2016-2111 http://badlock.org/  View
102090 18408 CVE-2016-2111 FEDORA-2016-be53260726  View
102091 18408 CVE-2016-2111 FEDORA-2016-48b3761baa  View
102092 18408 CVE-2016-2111 FEDORA-2016-383fce04e2  View
102093 18408 CVE-2016-2111 SUSE-SU-2016:1022  View
102094 18408 CVE-2016-2111 SUSE-SU-2016:1023  View
102095 18408 CVE-2016-2111 SUSE-SU-2016:1024  View
102096 18408 CVE-2016-2111 openSUSE-SU-2016:1025  View
102097 18408 CVE-2016-2111 SUSE-SU-2016:1028  View
102098 18408 CVE-2016-2111 openSUSE-SU-2016:1064  View
102099 18408 CVE-2016-2111 SUSE-SU-2016:1105  View
102100 18408 CVE-2016-2111 openSUSE-SU-2016:1106  View
102101 18408 CVE-2016-2111 openSUSE-SU-2016:1107  View
102102 18408 CVE-2016-2111 RHSA-2016:0611  View
102103 18408 CVE-2016-2111 RHSA-2016:0612  View
102104 18408 CVE-2016-2111 RHSA-2016:0613  View
102105 18408 CVE-2016-2111 RHSA-2016:0614  View
102106 18408 CVE-2016-2111 RHSA-2016:0618  View
102107 18408 CVE-2016-2111 RHSA-2016:0619  View
102108 18408 CVE-2016-2111 RHSA-2016:0620  View
102109 18408 CVE-2016-2111 RHSA-2016:0621  View
102110 18408 CVE-2016-2111 RHSA-2016:0623  View
102111 18408 CVE-2016-2111 RHSA-2016:0624  View
102112 18408 CVE-2016-2111 RHSA-2016:0625  View
102113 18408 CVE-2016-2111 DSA-3548  View
102114 18408 CVE-2016-2111 http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html  View
102115 18408 CVE-2016-2111 1035533  View
102116 18408 CVE-2016-2111 SSA:2016-106-02  View
102117 18408 CVE-2016-2111 USN-2950-1  View
102118 18408 CVE-2016-2111 USN-2950-2  View
102119 18408 CVE-2016-2111 USN-2950-3  View
102120 18408 CVE-2016-2111 USN-2950-4  View
102121 18408 CVE-2016-2111 USN-2950-5  View
102122 18408 CVE-2016-2111 https://bto.bluecoat.com/security-advisory/sa122  View
102123 18408 CVE-2016-2111 https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05087821  View
102124 18408 CVE-2016-2111 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05082964  View
102125 18408 CVE-2016-2111 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399  View
102126 18408 CVE-2016-2111 GLSA-201612-47  View
102127 18408 CVE-2016-2111 https://www.samba.org/samba/history/samba-4.2.10.html  View
102128 18408 CVE-2016-2111 https://www.samba.org/samba/latest_news.html#4.4.2  View
102129 18408 CVE-2016-2111 https://www.samba.org/samba/security/CVE-2016-2111.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1617 JVNDB-2016-002390 Samba の NETLOGON サービスにおける安全なチャネルのエンドポイントのコンピュータ名を偽装される脆弱性 Samba の NETLOGON サービスには、ドメインコントローラが設定されている場合、安全なチャネルのエンドポイントのコンピュータ名を偽装され、重要なセッション情報を取得される脆弱性が存在します。 CVE-2016-2111 88617 CVE-2016-2111 18408 4.3 6.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002390.html 2016-04-12 2016-09-30 View