Back

MEDIUM

samba: Smb signing not required by default when smb client connection is used for ipc usage

Published Apr 25, 2016

Description

Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not require SMB signing within a DCERPC session over ncacn_np, which allows man-in-the-middle attackers to spoof SMB clients by modifying the client-server data stream.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (2)

References (42)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Apr 25, 2016
Updated Aug 5, 2024
Reserved Jan 29, 2016
NVD
Status Modified
Modified Jun 17, 2026
Red Hat
Severity Moderate
Public date Apr 12, 2016