NVD

Id
18409  
Name
CVE-2016-2112  
Description
The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "client ldap sasl wrapping" setting, which allows man-in-the-middle attackers to perform LDAP protocol-downgrade attacks by modifying the client-server data stream.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-04-24  
Modified Date
2016-12-30  
Seq
2016-2112  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
102130 18409 CVE-2016-2112 http://badlock.org/  View
102131 18409 CVE-2016-2112 FEDORA-2016-be53260726  View
102132 18409 CVE-2016-2112 FEDORA-2016-48b3761baa  View
102133 18409 CVE-2016-2112 FEDORA-2016-383fce04e2  View
102134 18409 CVE-2016-2112 SUSE-SU-2016:1022  View
102135 18409 CVE-2016-2112 SUSE-SU-2016:1023  View
102136 18409 CVE-2016-2112 SUSE-SU-2016:1024  View
102137 18409 CVE-2016-2112 openSUSE-SU-2016:1025  View
102138 18409 CVE-2016-2112 SUSE-SU-2016:1028  View
102139 18409 CVE-2016-2112 openSUSE-SU-2016:1064  View
102140 18409 CVE-2016-2112 openSUSE-SU-2016:1106  View
102141 18409 CVE-2016-2112 openSUSE-SU-2016:1107  View
102142 18409 CVE-2016-2112 RHSA-2016:0611  View
102143 18409 CVE-2016-2112 RHSA-2016:0612  View
102144 18409 CVE-2016-2112 RHSA-2016:0613  View
102145 18409 CVE-2016-2112 RHSA-2016:0614  View
102146 18409 CVE-2016-2112 RHSA-2016:0618  View
102147 18409 CVE-2016-2112 RHSA-2016:0619  View
102148 18409 CVE-2016-2112 RHSA-2016:0620  View
102149 18409 CVE-2016-2112 RHSA-2016:0624  View
102150 18409 CVE-2016-2112 DSA-3548  View
102151 18409 CVE-2016-2112 http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html  View
102152 18409 CVE-2016-2112 1035533  View
102153 18409 CVE-2016-2112 SSA:2016-106-02  View
102154 18409 CVE-2016-2112 USN-2950-1  View
102155 18409 CVE-2016-2112 USN-2950-2  View
102156 18409 CVE-2016-2112 USN-2950-3  View
102157 18409 CVE-2016-2112 USN-2950-4  View
102158 18409 CVE-2016-2112 USN-2950-5  View
102159 18409 CVE-2016-2112 https://bto.bluecoat.com/security-advisory/sa122  View
102160 18409 CVE-2016-2112 https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05087821  View
102161 18409 CVE-2016-2112 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05082964  View
102162 18409 CVE-2016-2112 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399  View
102163 18409 CVE-2016-2112 GLSA-201612-47  View
102164 18409 CVE-2016-2112 https://www.samba.org/samba/history/samba-4.2.10.html  View
102165 18409 CVE-2016-2112 https://www.samba.org/samba/latest_news.html#4.4.2  View
102166 18409 CVE-2016-2112 https://www.samba.org/samba/security/CVE-2016-2112.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1618 JVNDB-2016-002391 Samba にバンドルされている LDAP クライアントライブラリにおける LDAP プロトコルダウングレード攻撃を実行される脆弱性 Samba にバンドルされている LDAP クライアントライブラリは、"client ldap sasl wrapping" の設定を認識しないため、LDAP プロトコルダウングレード攻撃を実行される脆弱性が存在します。 CVE-2016-2112 88618 CVE-2016-2112 18409 4.3 5.9 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002391.html 2016-04-12 2016-09-30 View