Samba Signing Security Protection Downgrade Vulnerability

Last Update Date: 8 Jul 2016 09:17 Release Date: 8 Jul 2016 3553 Views

RISK: Medium Risk

TYPE: Servers - Other Servers

A vulnerability was identified in Samba. A remote user can downgrade client signing security controls on the target system and impersonate the target server.

Impact

Spoofing
Data Manipulation

System / Technologies affected

Version 4.0.0 to 4.4.4

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Update to version 4.2.14, 4.3.11 or 4.4.5

Vulnerability Identifier

CVE-2016-2119

Source

SecurityTracker
Samba