A flaw was found in samba's Heimdal KDC implementation, versions 4.8.x up to, excluding 4.8.12, 4.9.x up to, excluding 4.9.8 and 4.10.x up to, excluding 4.10.3, when used in AD DC mode. A man in the middle attacker could use this flaw to intercept the request to the KDC and replace the user name (principal) in the request with any desired user name (principal) that exists in the KDC effectively obtaining a ticket for that principal.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade heimdalUpgrade samba | Jul 31, 2019 | Jul 31, 2019 |
| Apple Osx Heimdal | — | Apply Apple macOS Security Update 2019-004 High Sierra | Jul 23, 2019 | Jul 22, 2019 |
| Debian | — | Upgrade sambaUpgrade heimdal | May 15, 2019 | May 15, 2019 |
| Freebsd | — | Upgrade samba49Upgrade samba46Upgrade samba48Upgrade samba410Upgrade samba47 | May 18, 2019 | May 14, 2019 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Jul 31, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-common-toolsUpgrade samba-commonUpgrade samba-clientUpgrade samba-winbindUpgrade samba-libsUpgrade samba-pythonUpgrade libwbclientUpgrade sambaUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade libsmbclientUpgrade samba-client-libs | Nov 3, 2020 | Jul 31, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libsmbclientUpgrade samba-clientUpgrade samba-libsUpgrade samba-common-libsUpgrade sambaUpgrade samba-winbind-clientsUpgrade samba-pythonUpgrade samba-commonUpgrade samba-common-toolsUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade libwbclientUpgrade samba-client-libs | Sep 28, 2020 | Jul 31, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-commonUpgrade libwbclientUpgrade samba-client-libsUpgrade sambaUpgrade samba-libsUpgrade samba-common-toolsUpgrade samba-pythonUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-winbindUpgrade samba-client | Jun 3, 2020 | Jul 31, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-common-toolsUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade python3-samba-testUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade samba-winbind-krb5-locatorUpgrade samba-test-libsUpgrade ctdbUpgrade samba-clientUpgrade samba-dc-libsUpgrade libsmbclientUpgrade samba-pidlUpgrade samba-winbindUpgrade ctdb-testsUpgrade python2-samba-testUpgrade samba-krb5-printingUpgrade samba-testUpgrade samba-libsUpgrade python3-sambaUpgrade samba-client-libsUpgrade sambaUpgrade libwbclientUpgrade python2-samba | Jan 3, 2020 | Jul 31, 2019 |
| Samba | — | Upgrade to Samba version 4.9.8Upgrade to Samba version 4.8.12Upgrade to Samba version 4.10.3 | May 24, 2019 | May 24, 2019 |
| Suse | — | Upgrade samba-libs-32bitUpgrade libnetapi0Upgrade libdcerpc-samr-develUpgrade libheimdalUpgrade samba-develUpgrade libsmbldap2Upgrade libtevent-util0Upgrade samba-docUpgrade libndr-krb5pac0-32bitUpgrade samba-libs-python3Upgrade libsamba-util-develUpgrade libsamba-util0-32bitUpgrade libsmbclient0-32bitUpgrade libsamdb0Upgrade libsamba-credentials-develUpgrade samba-libsUpgrade libdcerpc-develUpgrade libsmbldap2-32bitUpgrade libsamba-hostconfig0Upgrade libsamba-policy0-python3Upgrade libsamba-policy-develUpgrade sambaUpgrade ctdbUpgrade libwbclient0Upgrade libdcerpc0-32bitUpgrade libndr-nbt0Upgrade libsmbclient0Upgrade samba-winbind-32bitUpgrade libtevent-util0-32bitUpgrade samba-ad-dc-libsUpgrade libdcerpc-binding0Upgrade libsmbconf0Upgrade libtevent-util-develUpgrade samba-cephUpgrade libheimdal-develUpgrade libsmbclient-develUpgrade libsamba-credentials0-32bitUpgrade libndr0Upgrade libsmbconf0-32bitUpgrade libndr1Upgrade samba-winbindUpgrade libsamba-errors0-32bitUpgrade libndr-nbt-develUpgrade libndr-krb5pac0Upgrade libnetapi-develUpgrade libsamdb0-32bitUpgrade libndr-nbt0-32bitUpgrade libndr-standard0Upgrade samba-client-libsUpgrade samba-client-32bitUpgrade libsamba-policy-python3-develUpgrade libndr-standard-develUpgrade libwbclient0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libndr-develUpgrade libsamba-hostconfig-develUpgrade samba-client-libs-32bitUpgrade libsamba-passdb0-32bitUpgrade libsamba-errors0Upgrade libdcerpc-samr0Upgrade libndr-krb5pac-develUpgrade samba-core-develUpgrade samba-python3Upgrade libndr0-32bitUpgrade libsmbconf-develUpgrade samba-clientUpgrade libsamba-errors-develUpgrade libdcerpc-binding0-32bitUpgrade libdcerpc0Upgrade samba-libs-python3-32bitUpgrade libwbclient-develUpgrade samba-dsdb-modulesUpgrade libsmbldap-develUpgrade libsamdb-develUpgrade libsamba-passdb-develUpgrade samba-ldb-ldapUpgrade libnetapi0-32bitUpgrade samba-winbind-libsUpgrade libsamba-credentials0Upgrade libsamba-util0Upgrade libsamba-passdb0Upgrade samba-gpupdateUpgrade libndr1-32bitUpgrade samba-winbind-libs-32bitUpgrade libndr-standard0-32bit | Nov 28, 2022 | Jul 31, 2019 |
| Ubuntu | — | Upgrade heimdal-kdc (Ubuntu Pro)Upgrade libkrb5-26-heimdalUpgrade heimdal-kdcUpgrade heimdal-kcm (Ubuntu Pro)Upgrade heimdal-servers (Ubuntu Pro)Upgrade heimdal-serversUpgrade libgssapi3-heimdal (Ubuntu Pro)Upgrade libgssapi3-heimdalUpgrade heimdal-clientsUpgrade sambaUpgrade libkdc2-heimdal (Ubuntu Pro)Upgrade heimdal-clients-x (Ubuntu Pro)Upgrade heimdal-clients (Ubuntu Pro)Upgrade samba (Ubuntu Pro)Upgrade heimdal-kcmUpgrade heimdal-servers-x (Ubuntu Pro)Upgrade libkdc2-heimdalUpgrade libkrb5-26-heimdal (Ubuntu Pro) | May 15, 2019 | May 14, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub