samba.git/libcli/security, branch v3-5-test

Fix bug #7669.

2010-09-15T18:53:08+00:00

Fix bug #7669 (buffer overflow in sid_parse() in Samba3 and dom_sid_parse in
Samba4).

CVE-2010-3069:

===========
Description
===========

All current released versions of Samba are vulnerable to
a buffer overrun vulnerability. The sid_parse() function
(and related dom_sid_parse() function in the source4 code)
do not correctly check their input lengths when reading a
binary representation of a Windows SID (Security ID). This
allows a malicious client to send a sid that can overflow
the stack variable that is being used to store the SID in the
Samba smbd server.

A connection to a file share is needed to exploit this
vulnerability, either authenticated or unauthenticated
(guest connection).
(cherry picked from commit a34c3e999bb1ea61da31c5b3e845b19663039358)

Initial implementation of security descriptor creation in DS

2009-09-20T22:16:17+00:00

TODO's:
ACE sorting and clarifying the inheritance of object specific ace's.

Owner and group defaulting.

2009-09-16T14:52:05+00:00

Signed-off-by: Andrew Bartlett

Create a correct talloc hierarchy in make_sec_acl()

2009-07-14T18:49:06+00:00

A fix in the ACL code used by both SAMBA 3 and 4

2009-06-19T01:32:01+00:00

This fixes an uninitialised structure. It has been found through valgrind
in the RAW-ACLs test suite (Bug #6397).

Fix includes for security_descriptor file for the non-merged build.

2009-04-21T15:19:22+00:00

Move the security_descriptor utility code to the top-level.

2009-04-21T13:14:35+00:00

display_sec: Move to common libcli/security directory.

2009-03-25T20:29:13+00:00

libcli/security: fix the source4 build

2009-03-02T11:05:43+00:00

metze

libcli/security: fix the source3 build

2009-03-02T07:56:22+00:00

metze