title: Red Hat Security Advisory: samba4 security, bug fix, and enhancement update
description: samba: crash in dcesrv_auth_bind_ack due to missing error check samba: Man-in-the-middle attacks possible with NTLMSSP authentication samba: Spoofing vulnerability when domain controller is configured samba: Missing downgrade detection samba: Server certificates not validated at client side samba: Samba based active directory domain controller does not enforce smb signing samba: Smb signing not required by default when smb client connection is used for ipc usage samba: SAMR and LSA man in the middle attacks
cpes: cpe:/o:redhat:rhel_aus:6.4::server cpe:/o:redhat:rhel_aus:6.5::server cpe:/o:redhat:rhel_eus:6.6::computenode cpe:/o:redhat:rhel_eus:6.6::server cpe:/o:redhat:rhel_mission_critical:6.2::server