CVE-2020-1472(ZeroLogon): libcli/auth: add netlogon_creds_is_random_challenge() to...
authorStefan Metzmacher <metze@samba.org>
Wed, 16 Sep 2020 14:15:26 +0000 (16:15 +0200)
committerKarolin Seeger <kseeger@samba.org>
Fri, 18 Sep 2020 09:06:21 +0000 (11:06 +0200)
commitef49b5d0911aae59cb4dad8bdcbd966d4167522b
tree19552b456359b496bc562415e32b4462ed4ab046
parent0371ca12772e0ec8bd62810cf040cfd8e841116b
CVE-2020-1472(ZeroLogon): libcli/auth: add netlogon_creds_is_random_challenge() to avoid weak values

This is the check Windows is using, so we won't generate challenges,
which are rejected by Windows DCs (and future Samba DCs).

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14497

Signed-off-by: Stefan Metzmacher <metze@samba.org>
libcli/auth/credentials.c
libcli/auth/proto.h