[Samba] Microsoft Patch MS14-068 and Samba

Andrew Bartlett abartlet at samba.org
Wed Nov 26 01:49:28 MST 2014

On Tue, 2014-11-25 at 05:39 +0800, John Blac wrote:
> Hi Everyone,
> Will Samba be affected in this patch was applied to an AD server it is
> connected to?
> https://technet.microsoft.com/en-us/library/security/ms14-068.aspx

No, this won't impact Samba in any way.  Thankfully the vulnerability
was beyond the expected scope of the protocol, rather than a legitimate
part of the protocol being found insecure.  

Samba would always have rejected such a PAC in any case. 

Andrew Bartlett

Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba

More information about the samba mailing list