NVD

Id
18416  
Name
CVE-2016-2119  
Description
libcli/smb/smbXcli_base.c in Samba 4.x before 4.2.14, 4.3.x before 4.3.11, and 4.4.x before 4.4.5 allows man-in-the-middle attackers to bypass a client-signing protection mechanism, and consequently spoof SMB2 and SMB3 servers, via the (1) SMB2_SESSION_FLAG_IS_GUEST or (2) SMB2_SESSION_FLAG_IS_NULL flag.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-07-07  
Modified Date
2016-11-28  
Seq
2016-2119  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
102325 18416 CVE-2016-2119 openSUSE-SU-2016:1830  View
102326 18416 CVE-2016-2119 RHSA-2016:1486  View
102327 18416 CVE-2016-2119 RHSA-2016:1487  View
102328 18416 CVE-2016-2119 RHSA-2016:1494  View
102329 18416 CVE-2016-2119 http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html  View
102330 18416 CVE-2016-2119 91700  View
102331 18416 CVE-2016-2119 https://www.samba.org/samba/security/CVE-2016-2119.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2727 JVNDB-2016-003500 Samba の libcli/smb/smbXcli_base.c におけるクライアント署名の保護メカニズムを回避される脆弱性 Samba の libcli/smb/smbXcli_base.c には、クライアント署名の保護メカニズムを回避され、その結果、SMB2 および SMB3 サーバになりすまされる脆弱性が存在します。 CVE-2016-2119 88625 CVE-2016-2119 18416 6.8 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003500.html 2016-07-07 2016-07-12 View