CVE-2016-2118: s4:rpc_server/samr: allow _samr_ValidatePassword only with PRIVACY...
authorStefan Metzmacher <metze@samba.org>
Sun, 28 Feb 2016 21:48:11 +0000 (22:48 +0100)
committerStefan Metzmacher <metze@samba.org>
Wed, 30 Mar 2016 02:08:52 +0000 (04:08 +0200)
commit3410c21cfe1dbbbabde4939c8cc1e02b2d99d49f
tree491f10746ed112a88634dd1f75367aa9fedb1e5c
parent2b1f9958378f99501d806ec9128ba0e12d8e89c9
CVE-2016-2118: s4:rpc_server/samr: allow _samr_ValidatePassword only with PRIVACY...

This requires transport encryption.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11616

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Günther Deschner <gd@samba.org>
source4/rpc_server/samr/dcesrv_samr.c