Name: CVE-2016-2125: Improper Authentication
Creator: Rapid7
Published: 2018-10-31T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2016-2125, CWE-287, CWE-20, CVSS 6.5, EPSS 0.10867

It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users.

CVSS Details

CVSS 3.1 Base Score: 6.5
CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
CVSS 3.0 Base Score: 6.4
CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alpine Linux	—	Upgrade samba	Oct 31, 2018	Oct 31, 2018
Amazon_linux	—	Upgrade samba	May 31, 2017	Dec 19, 2016
Arch Linux	—	Upgrade to the latest version of Arch Linux	Jul 11, 2025	Oct 31, 2018
Centos_linux	—	Upgrade samba-commonUpgrade samba-develUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locatorUpgrade sambaUpgrade samba-glusterfsUpgrade samba4-winbind-krb5-locatorUpgrade samba4-winbindUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade samba-test-libsUpgrade samba4-winbind-clientsUpgrade samba-vfs-glusterfsUpgrade samba4-clientUpgrade samba-swatUpgrade samba4-commonUpgrade libsmbclientUpgrade samba4-testUpgrade samba-pythonUpgrade samba4-dcUpgrade samba-krb5-printingUpgrade samba4Upgrade samba4-develUpgrade samba4-pidlUpgrade samba-winbind-develUpgrade samba-dcUpgrade libsmbclient-develUpgrade samba-libsUpgrade samba-client-libsUpgrade samba-debuginfoUpgrade libwbclientUpgrade samba4-pythonUpgrade samba4-libsUpgrade samba-dc-libsUpgrade samba-testUpgrade samba-pidlUpgrade samba-domainjoin-guiUpgrade samba4-dc-libsUpgrade samba-common-libsUpgrade libwbclient-develUpgrade samba-docUpgrade samba4-debuginfo	May 24, 2017	Dec 19, 2016
Debian	—	Upgrade samba	Dec 20, 2016	Dec 19, 2016
Freebsd	—	Upgrade samba44Upgrade samba42Upgrade samba4Upgrade samba45Upgrade samba36Upgrade samba41Upgrade samba43	Dec 28, 2016	Dec 26, 2016
Huawei Euleros 2_0_sp1	—	Upgrade samba-client-libsUpgrade samba-libsUpgrade samba-pythonUpgrade libwbclientUpgrade samba-common-toolsUpgrade libsmbclientUpgrade samba-commonUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade sambaUpgrade samba-winbind-modulesUpgrade samba-winbind	Aug 28, 2019	Oct 31, 2018
Huawei Euleros 2_0_sp2	—	Upgrade samba-libsUpgrade samba-clientUpgrade libwbclientUpgrade samba-client-libsUpgrade samba-winbindUpgrade samba-commonUpgrade samba-pythonUpgrade sambaUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-common-libs	Aug 28, 2019	Oct 31, 2018
Oracle Solaris	—	Upgrade library/samba/libsmbclient to version 4.4.8-0.175.3.17.0.3.0 on Solaris 11.3Upgrade service/network/samba to version 4.4.8-0.175.3.17.0.3.0 on Solaris 11.3	May 29, 2017	May 29, 2017
Oracle_linux	—	Upgrade samba-winbind-modulesUpgrade samba-pythonUpgrade samba4-winbindUpgrade samba-domainjoin-guiUpgrade samba-common-toolsUpgrade sambaUpgrade libwbclient-develUpgrade samba-develUpgrade samba-common-libsUpgrade samba-dc-libsUpgrade samba4-libsUpgrade libsmbclient-develUpgrade samba-winbindUpgrade samba4-develUpgrade samba-docUpgrade samba-winbind-krb5-locatorUpgrade samba-clientUpgrade samba4-winbind-krb5-locatorUpgrade samba-libsUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade samba-swatUpgrade libsmbclientUpgrade samba4-testUpgrade ctdb-testsUpgrade samba4-winbind-clientsUpgrade samba4-clientUpgrade samba-krb5-printingUpgrade samba-vfs-glusterfsUpgrade samba4Upgrade samba4-commonUpgrade samba4-pythonUpgrade samba-glusterfsUpgrade samba-dcUpgrade samba4-dc-libsUpgrade samba-test-libsUpgrade samba-pidlUpgrade samba4-pidlUpgrade samba-testUpgrade libwbclientUpgrade samba4-dcUpgrade ctdbUpgrade samba-client-libsUpgrade samba-winbind-devel	Mar 28, 2017	Dec 19, 2016
Pulse Secure Pulse Connect Secure	—	Update Pulse Connect Secure to version 8.3R5Update Pulse Connect Secure to version 9.0R1Update Pulse Connect Secure to version 8.2R11Update Pulse Connect Secure to version 8.1R14	Oct 28, 2020	Oct 31, 2018
Redhat_linux	—	Upgrade samba-testUpgrade samba-domainjoin-guiUpgrade samba4Upgrade samba-dc-libsUpgrade samba-vfs-glusterfsUpgrade samba4-dc-libsUpgrade libsmbclient-develUpgrade samba4-debuginfoUpgrade samba-winbind-clientsUpgrade samba4-dcUpgrade samba-pythonUpgrade samba-winbind-develUpgrade samba-pidlUpgrade samba4-pythonUpgrade samba-develUpgrade samba-krb5-printingUpgrade samba4-clientUpgrade samba-commonUpgrade samba-libsUpgrade samba4-winbind-clientsUpgrade samba4-winbindNo solution existsUpgrade samba-clientUpgrade samba-test-libsUpgrade sambaUpgrade samba-docUpgrade samba4-pidlUpgrade samba-dcUpgrade samba-debuginfoUpgrade samba-common-libsUpgrade ctdbUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade libwbclientUpgrade samba4-develUpgrade samba4-winbind-krb5-locatorUpgrade samba4-commonUpgrade samba-winbind-krb5-locatorUpgrade samba-swatUpgrade libwbclient-develUpgrade libsmbclientUpgrade samba4-libsUpgrade samba4-testUpgrade samba-client-libsUpgrade ctdb-testsUpgrade samba-glusterfs	Mar 21, 2017	Dec 19, 2016
Samba	—	Upgrade to Samba version 4.5.3Upgrade to Samba version 4.4.8Upgrade to Samba version 4.3.13	Dec 20, 2016	Dec 20, 2016
Suse	—	Upgrade libldb-develUpgrade libdcerpc-samr0-32bitUpgrade libsmbsharemodes0Upgrade libsamba-util0-debuginfoUpgrade libsmbclient0-32bitUpgrade samba-krb-printingUpgrade samba-winbind-debuginfoUpgrade libndr-develUpgrade libtdb-develUpgrade libsmbclient-raw0-32bitUpgrade libndr-krb5pac0-debuginfoUpgrade libnetapi-develUpgrade libsamba-hostconfig0-32bitUpgrade libsmbldap0Upgrade libsamba-errors0-32bitUpgrade samba-libs-python3-32bitUpgrade libsamba-credentials-develUpgrade libdcerpc-binding0Upgrade samba-winbind-32bitUpgrade libndr-nbt0Upgrade libwbclient0-debuginfo-32bitUpgrade libsamba-util0Upgrade samba-client-debuginfoUpgrade libndr-krb5pac0-32bitUpgrade libwbclient0-32bitUpgrade libsamba-util-develUpgrade samba-core-develUpgrade libsamba-credentials0-32bitUpgrade libsamba-errors-develUpgrade libndr0-32bitUpgrade libsmbconf-develUpgrade ldapsmbUpgrade sambaUpgrade libgensec0Upgrade samba-clientUpgrade libdcerpc-binding0-debuginfo-32bitUpgrade ctdb-develUpgrade libtalloc2-32bitUpgrade samba-libs-32bitUpgrade samba-winbindUpgrade libdcerpc-atsvc0Upgrade libsmbldap0-32bitUpgrade libtevent-util0-debuginfo-32bitUpgrade libsmbclient0Upgrade libwbclient0-debuginfoUpgrade libsamba-policy-develUpgrade samba-x86Upgrade libtdb1Upgrade libsamba-credentials0-debuginfoUpgrade samba-docUpgrade libsamba-hostconfig0-debuginfoUpgrade libtevent-util0Upgrade libndr-nbt0-debuginfo-32bitUpgrade libndr-krb5pac0-debuginfo-32bitUpgrade libndr-krb5pac0Upgrade libndr-nbt-develUpgrade samba-pythonUpgrade libdcerpc0-32bitUpgrade libsamba-passdb0-debuginfoUpgrade libregistry0-debuginfo-32bitUpgrade libwbclient-develUpgrade libgensec0-debuginfoUpgrade libsamba-policy0-debuginfo-32bitUpgrade libsmbldap2Upgrade libdcerpc-atsvc0-32bitUpgrade samba-debugsourceUpgrade libndr-krb5pac-develUpgrade ctdb-debuginfoUpgrade libsamba-errors0Upgrade libregistry-develUpgrade libdcerpc-samr-develUpgrade libsmbclient-raw0-debuginfo-32bitUpgrade libsmbconf0-debuginfoUpgrade libregistry0Upgrade libtdb1-32bitUpgrade libdcerpc-develUpgrade libsamdb0Upgrade libndr-standard0Upgrade libgensec0-debuginfo-32bitUpgrade libsamdb0-debuginfoUpgrade libdcerpc0Upgrade ctdbUpgrade libdcerpc-samr0-debuginfoUpgrade samba-libs-python3Upgrade libnetapi0-32bitUpgrade libsamba-errors0-debuginfoUpgrade libdcerpc-atsvc0-debuginfo-32bitUpgrade libdcerpc0-debuginfoUpgrade samba-winbind-x86Upgrade samba-pidlUpgrade libdcerpc-atsvc0-debuginfoUpgrade samba-32bitUpgrade samba-libs-debuginfo-32bitUpgrade samba-client-debuginfo-32bitUpgrade libndr0-debuginfoUpgrade libtdb1-x86Upgrade libtalloc2Upgrade libsamba-passdb0Upgrade libsmbclient-develUpgrade samba-python-debuginfoUpgrade libsmbclient-raw0-debuginfoUpgrade samba-test-debuginfoUpgrade libdcerpc0-debuginfo-32bitUpgrade libsamba-hostconfig-develUpgrade libsmbclient-raw-develUpgrade samba-debuginfo-32bitUpgrade libsamba-util0-32bitUpgrade libtevent0-x86Upgrade libtevent-develUpgrade libsamdb0-32bitUpgrade libsmbconf0Upgrade libsmbclient0-debuginfoUpgrade libldb1Upgrade libdcerpc-binding0-debuginfoUpgrade libsmbldap0-debuginfoUpgrade libregistry0-32bitUpgrade libtalloc-develUpgrade libtevent0Upgrade libsamdb-develUpgrade samba-test-develUpgrade libnetapi0-debuginfoUpgrade libtalloc2-x86Upgrade libsmbldap-develUpgrade libtevent-util0-debuginfoUpgrade libwbclient0Upgrade libnetapi0-debuginfo-32bitUpgrade libsamba-passdb0-32bitUpgrade libndr-nbt0-debuginfoUpgrade libsamba-hostconfig0Upgrade libndr0Upgrade libndr-standard0-32bitUpgrade samba-libsUpgrade ctdb-tests-debuginfoUpgrade libndr-standard0-debuginfoUpgrade samba-libs-debuginfoUpgrade ctdb-testsUpgrade libndr-standard0-debuginfo-32bitUpgrade libsmbsharemodes-develUpgrade libsamba-policy0-debuginfoUpgrade libsamba-policy0-32bitUpgrade libsamdb0-debuginfo-32bitUpgrade libsamba-policy0Upgrade libndr-nbt0-32bitUpgrade libsamba-errors0-debuginfo-32bitUpgrade libsmbclient-raw0Upgrade samba-debuginfoUpgrade samba-kdcUpgrade samba-client-32bitUpgrade libdcerpc-samr0Upgrade libsamba-passdb0-debuginfo-32bitUpgrade libndr0-debuginfo-32bitUpgrade samba-testUpgrade libndr-standard-develUpgrade samba-develUpgrade samba-winbind-debuginfo-32bitUpgrade samba-dsdb-modulesUpgrade libsmbldap2-32bitUpgrade libsmbclient0-x86Upgrade libtevent0-32bitUpgrade libtevent-util0-32bitUpgrade libsmbconf0-debuginfo-32bitUpgrade libdcerpc-samr0-debuginfo-32bitUpgrade libdcerpc-binding0-32bitUpgrade libsmbclient0-debuginfo-32bitUpgrade libsamba-passdb-develUpgrade libsamba-hostconfig0-debuginfo-32bitUpgrade libsmbconf0-32bitUpgrade libregistry0-debuginfoUpgrade libsamba-credentials0-debuginfo-32bitUpgrade samba-client-x86Upgrade libsmbldap0-debuginfo-32bitUpgrade libgensec0-32bitUpgrade libnetapi0Upgrade libsamba-credentials0Upgrade libsamba-util0-debuginfo-32bitUpgrade libwbclient0-x86Upgrade libdcerpc-atsvc-develUpgrade libgensec-develUpgrade libtevent-util-devel	Dec 28, 2016	Dec 19, 2016
Ubuntu	—	Upgrade sambaUpgrade libsmbclientUpgrade winbind	Dec 20, 2016	Dec 19, 2016

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence