CVE-2020-10700: dsdb: Do not permit the ASQ control for the GUID search in paged_results
authorAndrew Bartlett <abartlet@samba.org>
Wed, 11 Mar 2020 03:43:31 +0000 (16:43 +1300)
committerKarolin Seeger <kseeger@samba.org>
Mon, 4 May 2020 10:14:28 +0000 (10:14 +0000)
commit906aa7ddb8fadb88581adaa158ea39dd50bf7e4e
tree13496e9fb70ef314ce5c237139f42844c2ead0dc
parentc309e6b2a704472ab2870e226bdaa172b4bf0fb8
CVE-2020-10700: dsdb: Do not permit the ASQ control for the GUID search in paged_results

ASQ is a very strange control and a BASE search can return multiple results
that are NOT the requested DN, but the DNs pointed to by it!

Thanks to Andrei Popa <andrei.popa@next-gen.ro> for finding,
reporting and working with us to diagnose this issue!

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14331

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Gary Lockyer <gary@catalyst.net.nz>
Autobuild-User(master): Karolin Seeger <kseeger@samba.org>
Autobuild-Date(master): Mon May  4 10:14:28 UTC 2020 on sn-devel-184
selftest/knownfail.d/asq [deleted file]
source4/dsdb/samdb/ldb_modules/paged_results.c