samba -- multiple vulnerabilities

The samba project reports:

Malicious servers can cause Samba client code to return filenames containing path separators to calling code.

[source]

When the password contains multi-byte (non-ASCII) characters, the check password script does not receive the full password string.

[source]

Users with the "get changes" extended access right can crash the AD DC LDAP server by requesting an attribute using the range= syntax.

[source]