From 4fd7aaf2b148fff7d5efc15e9f1923bf56b5b54a Mon Sep 17 00:00:00 2001 From: Günther Deschner Date: Tue, 11 Dec 2012 14:43:07 +0100 Subject: s4-rpc_server: limit allowed transports for samr_ValidatePassword(). MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Guenther Signed-off-by: Günther Deschner Reviewed-by: Stefan Metzmacher --- source4/rpc_server/samr/dcesrv_samr.c | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'source4/rpc_server') diff --git a/source4/rpc_server/samr/dcesrv_samr.c b/source4/rpc_server/samr/dcesrv_samr.c index d987fbaaef..3826075ebc 100644 --- a/source4/rpc_server/samr/dcesrv_samr.c +++ b/source4/rpc_server/samr/dcesrv_samr.c @@ -4290,6 +4290,11 @@ static NTSTATUS dcesrv_samr_ValidatePassword(struct dcesrv_call_state *dce_call, DATA_BLOB password; enum samr_ValidationStatus res; NTSTATUS status; + enum dcerpc_transport_t transport = dce_call->conn->endpoint->ep_description->transport; + + if (transport != NCACN_IP_TCP && transport != NCALRPC) { + DCESRV_FAULT(DCERPC_FAULT_ACCESS_DENIED); + } (*r->out.rep) = talloc_zero(mem_ctx, union samr_ValidatePasswordRep); -- cgit