| Package | Affected versions | Patched versions |
|---|---|---|
| samba | ≥ 4.0.0, < 4.2.14≥ 4.3.0, < 4.3.11≥ 4.4.0, < 4.4.5 | 4.2.144.3.114.4.5 |
libcli/smb/smbXcli_base.c in Samba 4.x before 4.2.14, 4.3.x before 4.3.11, and 4.4.x before 4.4.5 allows man-in-the-middle attackers to bypass a client-signing protection mechanism, and consequently spoof SMB2 and SMB3 servers, via the (1) SMB2_SESSION_FLAG_IS_GUEST or (2) SMB2_SESSION_FLAG_IS_NULL flag.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free