Articles by KENNETH

USN-4559-1: Samba update Tom Tervoort discovered that the Netlogon protocol implemented by Samba incorrectly handled the authentication scheme. A remote attacker could use this issue to forge an authentication token and steal the credentials of the domain admin. While a previous security update fixed the issue by changing the “server schannel” setting to default to “yes”, instead of “auto”, which forced a secure netlogon channel, this update provides additional improvements. For compatibility reasons with older devices, Samba now allows specifying an insecure netlogon configuration per machine. See the following link for examples: https://www.samba.org/samba/security/CVE-2020-1472.html In addition, this update adds additional server checks for the protocol attack in the client-specified challenge to provide some protection when ‘server schannel = no/auto’ and avoid the false-positive results when running the proof-of-concept exploit. Source: USN-4559-1: Samba update

USN-4558-1: libapreq2 vulnerabilities It was discovered that libapreq2 did not properly sanitize the Content-Type field in certain, crafted HTTP requests. An attacker could use this vulnerability to cause libapreq2 to crash. Source: USN-4558-1: libapreq2 vulnerabilities