NVD

Id
18415  
Name
CVE-2016-2118  
Description
The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 mishandle DCERPC connections, which allows man-in-the-middle attackers to perform protocol-downgrade attacks and impersonate users by modifying the client-server data stream, aka "BADLOCK."  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-04-12  
Modified Date
2016-12-30  
Seq
2016-2118  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
102282 18415 CVE-2016-2118 http://badlock.org/  View
102283 18415 CVE-2016-2118 FEDORA-2016-be53260726  View
102284 18415 CVE-2016-2118 FEDORA-2016-48b3761baa  View
102285 18415 CVE-2016-2118 FEDORA-2016-383fce04e2  View
102286 18415 CVE-2016-2118 SUSE-SU-2016:1022  View
102287 18415 CVE-2016-2118 SUSE-SU-2016:1023  View
102288 18415 CVE-2016-2118 SUSE-SU-2016:1024  View
102289 18415 CVE-2016-2118 openSUSE-SU-2016:1025  View
102290 18415 CVE-2016-2118 SUSE-SU-2016:1028  View
102291 18415 CVE-2016-2118 openSUSE-SU-2016:1064  View
102292 18415 CVE-2016-2118 openSUSE-SU-2016:1106  View
102293 18415 CVE-2016-2118 openSUSE-SU-2016:1107  View
102294 18415 CVE-2016-2118 RHSA-2016:0611  View
102295 18415 CVE-2016-2118 RHSA-2016:0612  View
102296 18415 CVE-2016-2118 RHSA-2016:0613  View
102297 18415 CVE-2016-2118 RHSA-2016:0614  View
102298 18415 CVE-2016-2118 RHSA-2016:0618  View
102299 18415 CVE-2016-2118 RHSA-2016:0619  View
102300 18415 CVE-2016-2118 RHSA-2016:0620  View
102301 18415 CVE-2016-2118 RHSA-2016:0621  View
102302 18415 CVE-2016-2118 RHSA-2016:0623  View
102303 18415 CVE-2016-2118 RHSA-2016:0624  View
102304 18415 CVE-2016-2118 RHSA-2016:0625  View
102305 18415 CVE-2016-2118 DSA-3548  View
102306 18415 CVE-2016-2118 http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html  View
102307 18415 CVE-2016-2118 86002  View
102308 18415 CVE-2016-2118 1035533  View
102309 18415 CVE-2016-2118 SSA:2016-106-02  View
102310 18415 CVE-2016-2118 USN-2950-1  View
102311 18415 CVE-2016-2118 USN-2950-2  View
102312 18415 CVE-2016-2118 USN-2950-3  View
102313 18415 CVE-2016-2118 USN-2950-4  View
102314 18415 CVE-2016-2118 USN-2950-5  View
102315 18415 CVE-2016-2118 https://access.redhat.com/security/vulnerabilities/badlock  View
102316 18415 CVE-2016-2118 https://bto.bluecoat.com/security-advisory/sa122  View
102317 18415 CVE-2016-2118 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399  View
102318 18415 CVE-2016-2118 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05166182  View
102319 18415 CVE-2016-2118 https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40196  View
102320 18415 CVE-2016-2118 GLSA-201612-47  View
102321 18415 CVE-2016-2118 VU#813296  View
102322 18415 CVE-2016-2118 https://www.samba.org/samba/history/samba-4.2.10.html  View
102323 18415 CVE-2016-2118 https://www.samba.org/samba/latest_news.html#4.4.2  View
102324 18415 CVE-2016-2118 https://www.samba.org/samba/security/CVE-2016-2118.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1235 JVNDB-2016-002008 Samba の MS-SAMR および MS-LSAD プロトコルの実装におけるプロトコルダウングレード攻撃を実行される脆弱性 Samba の MS-SAMR および MS-LSAD プロトコルの実装は、DCERPC 接続を誤って処理するため、プロトコルダウングレード攻撃を実行され、ユーザになりすまされる脆弱性が存在します。 CVE-2016-2118 88624 CVE-2016-2118 18415 4.3 5.9 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002008.html 2016-04-12 2016-08-25 View