CVE-2015-5296

Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 supports connections that are encrypted but unsigned, which allows man-in-the-middle attackers to conduct encrypted-to-unencrypted downgrade attacks by modifying the client-server data stream, related to clidfs.c,...

CVE-2015-5296: Improper Input Validation

Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 supports connections that are encrypted but unsigned, which allows man-in-the-middle attackers to conduct encrypted-to-unencrypted downgrade attacks by modifying the client-server data stream, related to clidfs.c,...

PT-2015-3397

Name of the Vulnerable Software and Affected Versions Samba versions 3.x and 4.x before 4.1.22 Samba versions 4.2.x before 4.2.7 Samba versions 4.3.x before 4.3.3 Description The issue is related to a lack of input validation in the Samba package, specifically in components clidfs.c, libsmb...