CVE-2016-2118: s4:rpc_server/netlogon: reject DCERPC_AUTH_LEVEL_CONNECT by default
authorStefan Metzmacher <metze@samba.org>
Fri, 7 Aug 2015 11:52:48 +0000 (13:52 +0200)
committerStefan Metzmacher <metze@samba.org>
Tue, 12 Apr 2016 17:25:27 +0000 (19:25 +0200)
commitea3f14c3f8297a08896af3fc87c7937b1e7e12c3
tree40d4ed9dca49c3fed32f6481afebd540162a3815
parent398a21c57c7a35ee6c6834d36907d9f9fee14515
CVE-2016-2118: s4:rpc_server/netlogon: reject DCERPC_AUTH_LEVEL_CONNECT by default

This prevents man in the middle downgrade attacks.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
source4/rpc_server/netlogon/dcerpc_netlogon.c