diff options
| author | Stefan Metzmacher <metze@samba.org> | 2021-08-05 13:31:29 +0200 |
|---|---|---|
| committer | Jule Anger <janger@samba.org> | 2021-11-08 10:52:13 +0100 |
| commit | 061c125c6129634d220c1074fa8ed5eaa8b0e09c (patch) | |
| tree | 089008c29298848d1fee21952592803ba7bb847f /selftest | |
| parent | 7c3b037600077ade1d0ee97f5707e1c5061c1b28 (diff) | |
| download | samba-061c125c6129634d220c1074fa8ed5eaa8b0e09c.tar.gz | |
CVE-2021-3738 s4:rpc_server/drsuapi: make use of assoc_group aware dcesrv_samdb_connect_as_*() helpers
This avoids a crash that's triggered by windows clients using
DsCrackNames across multiple connections within an association group
on the same DsBind context(policy) handle.
It also improves the auditing for the dcesrv_samdb_connect_as_system() case.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14468
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Diffstat (limited to 'selftest')
| -rw-r--r-- | selftest/knownfail.d/drsuapi.DsBindAssocGroupWS | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/selftest/knownfail.d/drsuapi.DsBindAssocGroupWS b/selftest/knownfail.d/drsuapi.DsBindAssocGroupWS deleted file mode 100644 index 9af5a904fdd..00000000000 --- a/selftest/knownfail.d/drsuapi.DsBindAssocGroupWS +++ /dev/null @@ -1 +0,0 @@ -^samba4.rpc.drsuapi.*drsuapi.DsBindAssocGroupWS |