CVEvulnerability
CVE-2016-2111
6.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2016-04-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.3 MEDIUM — CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:A/AC:M/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-254
Description
The NETLOGON service in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2, when a domain controller is configured, allows remote attackers to spoof the computer name of a secure channel's endpoint, and obtain sensitive session information, by running a crafted application and leveraging the ability to sniff network traffic, a related issue to CVE-2015-0005.
Affected configurations
• samba samba 3.0.0
• samba samba 3.0.1
• samba samba 3.0.2
• samba samba 3.0.2a
• samba samba 3.0.3
• samba samba 3.0.4
• samba samba 3.0.5
• samba samba 3.0.6
• samba samba 3.0.7
• samba samba 3.0.8
• samba samba 3.0.9
• samba samba 3.0.10
• samba samba 3.0.11
• samba samba 3.0.12
• samba samba 3.0.13
• samba samba 3.0.14
• samba samba 3.0.14a
• samba samba 3.0.15
• samba samba 3.0.16
• samba samba 3.0.17
• samba samba 3.0.18
• samba samba 3.0.19
• samba samba 3.0.20
• samba samba 3.0.20a
• samba samba 3.0.20b
• samba samba 3.0.21
• samba samba 3.0.21a
• samba samba 3.0.21b
• samba samba 3.0.21c
• samba samba 3.0.22
• samba samba 3.0.23
• samba samba 3.0.23a
• samba samba 3.0.23b
• samba samba 3.0.23c
• samba samba 3.0.23d
• samba samba 3.0.24
• samba samba 3.0.25
• samba samba 3.0.25a
• samba samba 3.0.25b
• samba samba 3.0.25c
• samba samba 3.0.26
• samba samba 3.0.26a
• samba samba 3.0.27
• samba samba 3.0.28
• samba samba 3.0.29
• samba samba 3.0.30
• samba samba 3.0.31
• samba samba 3.0.32
• samba samba 3.0.33
• samba samba 3.0.34
• samba samba 3.0.35
• samba samba 3.0.36
• samba samba 3.0.37
• samba samba 3.2.0
• samba samba 3.2.1
• samba samba 3.2.2
• samba samba 3.2.3
• samba samba 3.2.4
• samba samba 3.2.5
• samba samba 3.2.6
… and 165 more
Related
Weakness · not in database (1)
References
- http://badlock.org/ badlock.org
- http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html lists.fedoraproject.org
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00046.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html lists.opensuse.org
- http://rhn.redhat.com/errata/RHSA-2016-0611.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2016-0612.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2016-0613.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2016-0614.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2016-0618.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2016-0619.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2016-0620.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2016-0621.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2016-0623.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2016-0624.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2016-0625.html rhn.redhat.com
- http://www.debian.org/security/2016/dsa-3548 www.debian.org
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html www.oracle.com
- http://www.securitytracker.com/id/1035533 www.securitytracker.com
- http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.458012 www.slackware.com
- http://www.ubuntu.com/usn/USN-2950-1 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-2950-2 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-2950-3 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-2950-4 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-2950-5 Third Party Advisory
- https://bto.bluecoat.com/security-advisory/sa122 bto.bluecoat.com
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05087821 h20566.www2.hpe.com
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05082964 Third Party Advisory
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399 Third Party Advisory
- https://security.gentoo.org/glsa/201612-47 security.gentoo.org
- https://www.samba.org/samba/history/samba-4.2.10.html www.samba.org
- https://www.samba.org/samba/latest_news.html#4.4.2 www.samba.org
- https://www.samba.org/samba/security/CVE-2016-2111.html Patch, Vendor Advisory
- http://badlock.org/ badlock.org
- http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html lists.fedoraproject.org
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00046.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html lists.opensuse.org
- http://rhn.redhat.com/errata/RHSA-2016-0611.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2016-0612.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2016-0613.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2016-0614.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2016-0618.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2016-0619.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2016-0620.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2016-0621.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2016-0623.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2016-0624.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2016-0625.html rhn.redhat.com
- http://www.debian.org/security/2016/dsa-3548 www.debian.org
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html www.oracle.com
- http://www.securitytracker.com/id/1035533 www.securitytracker.com
- http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.458012 www.slackware.com
- http://www.ubuntu.com/usn/USN-2950-1 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-2950-2 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-2950-3 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-2950-4 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-2950-5 Third Party Advisory
- https://bto.bluecoat.com/security-advisory/sa122 bto.bluecoat.com
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05087821 h20566.www2.hpe.com
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05082964 Third Party Advisory
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399 Third Party Advisory
- https://security.gentoo.org/glsa/201612-47 security.gentoo.org
- https://www.samba.org/samba/history/samba-4.2.10.html www.samba.org