#VU235 Man-in-the-middle attack in Oracle products - CVE-2016-2110
Published: July 29, 2016 / Updated: November 22, 2018
Vulnerability identifier: #VU235
Vulnerability risk: Medium
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2016-2110
CWE-ID: CWE-300
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerable software:
Samba
Oracle Solaris
Oracle Linux
Samba
Oracle Solaris
Oracle Linux
Software vendor:
Samba
Oracle
Samba
Oracle
Description
The vulnerability allows a remote attacker to bypass security restrictions.
The vulnerability exists due to the failure to protect the feature negotiation of NTLMSSP from a downgrade. A remote unauthenticated attacker can bypass security restrictions by using man-in-the-middle techniques to clear NTLMSSP_NEGOTIATE_SIGN and NTLMSSP_NEGOTIATE_SEAL flags and perform downgrade attacks.
Successful exploitation of this vulnerability may result in security restrictions bypass.
The vulnerability exists due to the failure to protect the feature negotiation of NTLMSSP from a downgrade. A remote unauthenticated attacker can bypass security restrictions by using man-in-the-middle techniques to clear NTLMSSP_NEGOTIATE_SIGN and NTLMSSP_NEGOTIATE_SEAL flags and perform downgrade attacks.
Successful exploitation of this vulnerability may result in security restrictions bypass.
Remediation
Install Samba 4.4.2, 4.3.8 and 4.2.11.