diff options
| author | Stefan Metzmacher <metze@samba.org> | 2020-09-16 16:08:38 +0200 |
|---|---|---|
| committer | Karolin Seeger <kseeger@samba.org> | 2020-09-18 12:58:23 +0200 |
| commit | 520216a051a7fc0c4e2ef20b988c36d5d4a178f7 (patch) | |
| tree | 42f635c6bc188a44b83a6619099e6811e007667d | |
| parent | 0b45e084a450fe5e44904c0e4b9e2517f26c5336 (diff) | |
| download | samba-520216a051a7fc0c4e2ef20b988c36d5d4a178f7.tar.gz | |
CVE-2020-1472(ZeroLogon): libcli/auth: make use of netlogon_creds_random_challenge() in netlogon_creds_cli.c
This will avoid getting rejected by the server if we generate
a weak challenge.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14497
Signed-off-by: Stefan Metzmacher <metze@samba.org>
| -rw-r--r-- | libcli/auth/netlogon_creds_cli.c | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/libcli/auth/netlogon_creds_cli.c b/libcli/auth/netlogon_creds_cli.c index 817d2cd041a..0f6ca11ff96 100644 --- a/libcli/auth/netlogon_creds_cli.c +++ b/libcli/auth/netlogon_creds_cli.c @@ -1177,8 +1177,7 @@ static void netlogon_creds_cli_auth_challenge_start(struct tevent_req *req) TALLOC_FREE(state->creds); - generate_random_buffer(state->client_challenge.data, - sizeof(state->client_challenge.data)); + netlogon_creds_random_challenge(&state->client_challenge); subreq = dcerpc_netr_ServerReqChallenge_send(state, state->ev, state->binding_handle, |