CVE-2016-2124 | BDVDB-2026-170244 Detail

samba

Description#

A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentication was required.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-287 Improper Authentication

References#

https://bugzilla.redhat.com/show_bug.cgi?id=2019660
https://www.samba.org/samba/security/CVE-2016-2124.html
https://lists.debian.org/debian-lts-announce/2023/09/msg00013.html
https://security.gentoo.org/glsa/202309-06

Exploit#

No public exploit known

History#

Version 12022-02-18Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.