NVD

Id
18410  
Name
CVE-2016-2113  
Description
Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof LDAPS and HTTPS servers and obtain sensitive information via a crafted certificate.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-04-24  
Modified Date
2016-12-30  
Seq
2016-2113  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
102167 18410 CVE-2016-2113 http://badlock.org/  View
102168 18410 CVE-2016-2113 FEDORA-2016-be53260726  View
102169 18410 CVE-2016-2113 FEDORA-2016-48b3761baa  View
102170 18410 CVE-2016-2113 FEDORA-2016-383fce04e2  View
102171 18410 CVE-2016-2113 SUSE-SU-2016:1022  View
102172 18410 CVE-2016-2113 SUSE-SU-2016:1023  View
102173 18410 CVE-2016-2113 SUSE-SU-2016:1024  View
102174 18410 CVE-2016-2113 openSUSE-SU-2016:1025  View
102175 18410 CVE-2016-2113 SUSE-SU-2016:1028  View
102176 18410 CVE-2016-2113 openSUSE-SU-2016:1064  View
102177 18410 CVE-2016-2113 openSUSE-SU-2016:1106  View
102178 18410 CVE-2016-2113 openSUSE-SU-2016:1107  View
102179 18410 CVE-2016-2113 RHSA-2016:0612  View
102180 18410 CVE-2016-2113 RHSA-2016:0614  View
102181 18410 CVE-2016-2113 RHSA-2016:0618  View
102182 18410 CVE-2016-2113 RHSA-2016:0620  View
102183 18410 CVE-2016-2113 DSA-3548  View
102184 18410 CVE-2016-2113 http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html  View
102185 18410 CVE-2016-2113 1035533  View
102186 18410 CVE-2016-2113 SSA:2016-106-02  View
102187 18410 CVE-2016-2113 USN-2950-1  View
102188 18410 CVE-2016-2113 USN-2950-2  View
102189 18410 CVE-2016-2113 USN-2950-3  View
102190 18410 CVE-2016-2113 USN-2950-4  View
102191 18410 CVE-2016-2113 USN-2950-5  View
102192 18410 CVE-2016-2113 https://bto.bluecoat.com/security-advisory/sa122  View
102193 18410 CVE-2016-2113 GLSA-201612-47  View
102194 18410 CVE-2016-2113 https://www.samba.org/samba/history/samba-4.2.10.html  View
102195 18410 CVE-2016-2113 https://www.samba.org/samba/latest_news.html#4.4.2  View
102196 18410 CVE-2016-2113 https://www.samba.org/samba/security/CVE-2016-2113.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1619 JVNDB-2016-002392 Samba における LDAPS および HTTPS サーバになりすまされる脆弱性 Samba は、TLS サーバからの X.509 証明書を検証しないため、LDAPS および HTTPS サーバになりすまされ、重要な情報を取得される脆弱性が存在します。 CVE-2016-2113 88619 CVE-2016-2113 18410 5.8 7.4 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002392.html 2016-04-12 2016-06-06 View