NVD

Id
18411  
Name
CVE-2016-2114  
Description
The SMB1 protocol implementation in Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "server signing = mandatory" setting, which allows man-in-the-middle attackers to spoof SMB servers by modifying the client-server data stream.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-04-24  
Modified Date
2016-12-30  
Seq
2016-2114  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
102197 18411 CVE-2016-2114 http://badlock.org/  View
102198 18411 CVE-2016-2114 FEDORA-2016-be53260726  View
102199 18411 CVE-2016-2114 FEDORA-2016-48b3761baa  View
102200 18411 CVE-2016-2114 FEDORA-2016-383fce04e2  View
102201 18411 CVE-2016-2114 openSUSE-SU-2016:1106  View
102202 18411 CVE-2016-2114 openSUSE-SU-2016:1107  View
102203 18411 CVE-2016-2114 RHSA-2016:0612  View
102204 18411 CVE-2016-2114 RHSA-2016:0614  View
102205 18411 CVE-2016-2114 RHSA-2016:0618  View
102206 18411 CVE-2016-2114 RHSA-2016:0620  View
102207 18411 CVE-2016-2114 DSA-3548  View
102208 18411 CVE-2016-2114 http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html  View
102209 18411 CVE-2016-2114 86011  View
102210 18411 CVE-2016-2114 1035533  View
102211 18411 CVE-2016-2114 SSA:2016-106-02  View
102212 18411 CVE-2016-2114 USN-2950-1  View
102213 18411 CVE-2016-2114 USN-2950-2  View
102214 18411 CVE-2016-2114 USN-2950-3  View
102215 18411 CVE-2016-2114 USN-2950-4  View
102216 18411 CVE-2016-2114 USN-2950-5  View
102217 18411 CVE-2016-2114 https://bto.bluecoat.com/security-advisory/sa122  View
102218 18411 CVE-2016-2114 GLSA-201612-47  View
102219 18411 CVE-2016-2114 https://www.samba.org/samba/history/samba-4.2.10.html  View
102220 18411 CVE-2016-2114 https://www.samba.org/samba/latest_news.html#4.4.2  View
102221 18411 CVE-2016-2114 https://www.samba.org/samba/security/CVE-2016-2114.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1620 JVNDB-2016-002393 Samba の SMB1 プロトコルの実装における SMB サーバになりすまされる脆弱性 Samba の SMB1 プロトコルの実装は、"server signing = mandatory" の設定を認識しないため、SMB サーバになりすまされる脆弱性が存在します。 CVE-2016-2114 88620 CVE-2016-2114 18411 4.3 5.9 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002393.html 2016-04-12 2016-06-06 View