A flaw was found in samba's Heimdal KDC implementation, versions 4.8.x up to, excluding 4.8.12, 4.9.x up to, excluding 4.9.8 and 4.10.x up to, excluding 4.10.3, when used in AD DC mode. A man in the middle attacker could use this flaw to intercept the request to the KDC and replace the user name (principal) in the request with any desired user name (principal) that exists in the KDC effectively obtaining a ticket for that principal.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade heimdalUpgrade samba | Jul 31, 2019 | Jul 31, 2019 |
| Apple Osx Heimdal | — | Apply Apple macOS Security Update 2019-004 High Sierra | Jul 23, 2019 | Jul 22, 2019 |
| Debian | — | Upgrade sambaUpgrade heimdal | May 15, 2019 | May 15, 2019 |
| Freebsd | — | Upgrade samba47Upgrade samba410Upgrade samba46Upgrade samba49Upgrade samba48 | May 18, 2019 | May 14, 2019 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Jul 31, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-winbind-clientsUpgrade samba-winbindUpgrade samba-libsUpgrade samba-pythonUpgrade libwbclientUpgrade samba-commonUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade sambaUpgrade samba-client-libsUpgrade samba-common-libsUpgrade libsmbclient | Nov 3, 2020 | Jul 31, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-common-toolsUpgrade samba-pythonUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade sambaUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade samba-libsUpgrade samba-commonUpgrade samba-winbindUpgrade libsmbclientUpgrade libwbclientUpgrade samba-client-libs | Sep 28, 2020 | Jul 31, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-commonUpgrade libwbclientUpgrade samba-client-libsUpgrade samba-pythonUpgrade samba-winbind-clientsUpgrade sambaUpgrade samba-libsUpgrade samba-winbindUpgrade samba-clientUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade libsmbclient | Jun 3, 2020 | Jul 31, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-winbind-krb5-locatorUpgrade samba-clientUpgrade python3-samba-testUpgrade samba-dc-libsUpgrade ctdbUpgrade samba-common-toolsUpgrade libsmbclientUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-test-libsUpgrade samba-pidlUpgrade samba-krb5-printingUpgrade samba-winbindUpgrade ctdb-testsUpgrade samba-client-libsUpgrade python2-samba-testUpgrade sambaUpgrade python2-sambaUpgrade samba-libsUpgrade python3-sambaUpgrade libwbclientUpgrade samba-test | Jan 3, 2020 | Jul 31, 2019 |
| Samba | — | Upgrade to Samba version 4.10.3Upgrade to Samba version 4.8.12Upgrade to Samba version 4.9.8 | May 24, 2019 | May 24, 2019 |
| Suse | — | Upgrade libheimdal-develUpgrade libndr-nbt-develUpgrade libndr-nbt0Upgrade libsamba-errors0-32bitUpgrade libdcerpc-binding0Upgrade libdcerpc-develUpgrade libsamba-hostconfig0Upgrade libsmbconf0-32bitUpgrade libsmbconf0Upgrade libndr1Upgrade samba-winbindUpgrade libsamba-credentials0-32bitUpgrade samba-libsUpgrade libsamba-policy0-python3Upgrade samba-winbind-32bitUpgrade sambaUpgrade ctdbUpgrade libsmbldap2Upgrade libtevent-util0-32bitUpgrade samba-libs-python3Upgrade libsmbclient0-32bitUpgrade libsamba-util-develUpgrade libsamba-util0-32bitUpgrade samba-docUpgrade libsamba-policy-develUpgrade libsmbclient-develUpgrade libsamdb0Upgrade libwbclient0Upgrade libndr-krb5pac0-32bitUpgrade libsmbclient0Upgrade libheimdalUpgrade libdcerpc0-32bitUpgrade samba-libs-32bitUpgrade libsmbldap2-32bitUpgrade samba-cephUpgrade libtevent-util0Upgrade libndr0Upgrade libsamba-credentials-develUpgrade libdcerpc-samr-develUpgrade libnetapi0Upgrade samba-develUpgrade libtevent-util-develUpgrade samba-ad-dc-libsUpgrade libsamba-passdb0Upgrade libdcerpc-samr0Upgrade libsamba-passdb-develUpgrade libsamba-errors-develUpgrade samba-client-libsUpgrade libnetapi-develUpgrade libndr-standard0Upgrade samba-winbind-libs-32bitUpgrade samba-winbind-libsUpgrade libsamdb0-32bitUpgrade libndr-nbt0-32bitUpgrade libsamba-credentials0Upgrade samba-gpupdateUpgrade libsamdb-develUpgrade libnetapi0-32bitUpgrade samba-core-develUpgrade libdcerpc0Upgrade samba-libs-python3-32bitUpgrade samba-client-32bitUpgrade libwbclient0-32bitUpgrade libndr0-32bitUpgrade libndr1-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libndr-standard-develUpgrade libndr-krb5pac0Upgrade libsmbldap-develUpgrade libndr-standard0-32bitUpgrade libdcerpc-binding0-32bitUpgrade libwbclient-develUpgrade samba-dsdb-modulesUpgrade samba-ldb-ldapUpgrade libsamba-util0Upgrade libsamba-hostconfig-develUpgrade libndr-develUpgrade libsamba-policy-python3-develUpgrade samba-python3Upgrade libsamba-errors0Upgrade libndr-krb5pac-develUpgrade libsamba-passdb0-32bitUpgrade libsmbconf-develUpgrade samba-client-libs-32bitUpgrade samba-client | Nov 28, 2022 | Jul 31, 2019 |
| Ubuntu | — | Upgrade heimdal-clients-x (Ubuntu Pro)Upgrade heimdal-kdcUpgrade heimdal-kcm (Ubuntu Pro)Upgrade libkrb5-26-heimdalUpgrade heimdal-serversUpgrade heimdal-kdc (Ubuntu Pro)Upgrade heimdal-servers (Ubuntu Pro)Upgrade sambaUpgrade heimdal-clientsUpgrade libgssapi3-heimdalUpgrade libgssapi3-heimdal (Ubuntu Pro)Upgrade libkdc2-heimdal (Ubuntu Pro)Upgrade libkrb5-26-heimdal (Ubuntu Pro)Upgrade samba (Ubuntu Pro)Upgrade heimdal-kcmUpgrade libkdc2-heimdalUpgrade heimdal-servers-x (Ubuntu Pro)Upgrade heimdal-clients (Ubuntu Pro) | May 15, 2019 | May 14, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub