CVE ID:	CVE-2016-2112
Description:	The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "client ldap sasl wrapping" setting, which allows man-in-the-middle attackers to perform LDAP protocol-downgrade attacks by modifying the client-server data stream.
Test IDs:	1.3.6.1.4.1.25623.1.0.703548
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2016-2112 Debian Security Information: DSA-3548 (Google Search) http://www.debian.org/security/2016/dsa-3548 http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html https://security.gentoo.org/glsa/201612-47 http://badlock.org/ RedHat Security Advisories: RHSA-2016:0611 http://rhn.redhat.com/errata/RHSA-2016-0611.html RedHat Security Advisories: RHSA-2016:0612 http://rhn.redhat.com/errata/RHSA-2016-0612.html RedHat Security Advisories: RHSA-2016:0613 http://rhn.redhat.com/errata/RHSA-2016-0613.html RedHat Security Advisories: RHSA-2016:0614 http://rhn.redhat.com/errata/RHSA-2016-0614.html RedHat Security Advisories: RHSA-2016:0618 http://rhn.redhat.com/errata/RHSA-2016-0618.html RedHat Security Advisories: RHSA-2016:0619 http://rhn.redhat.com/errata/RHSA-2016-0619.html RedHat Security Advisories: RHSA-2016:0620 http://rhn.redhat.com/errata/RHSA-2016-0620.html RedHat Security Advisories: RHSA-2016:0624 http://rhn.redhat.com/errata/RHSA-2016-0624.html http://www.securitytracker.com/id/1035533 http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.458012 SuSE Security Announcement: SUSE-SU-2016:1022 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html SuSE Security Announcement: SUSE-SU-2016:1023 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html SuSE Security Announcement: SUSE-SU-2016:1024 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html SuSE Security Announcement: SUSE-SU-2016:1028 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html SuSE Security Announcement: openSUSE-SU-2016:1025 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html SuSE Security Announcement: openSUSE-SU-2016:1064 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html SuSE Security Announcement: openSUSE-SU-2016:1106 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html SuSE Security Announcement: openSUSE-SU-2016:1107 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html http://www.ubuntu.com/usn/USN-2950-1 http://www.ubuntu.com/usn/USN-2950-2 http://www.ubuntu.com/usn/USN-2950-3 http://www.ubuntu.com/usn/USN-2950-4 http://www.ubuntu.com/usn/USN-2950-5