A flaw was found in samba's Heimdal KDC implementation, versions 4.8.x up to, excluding 4.8.12, 4.9.x up to, excluding 4.9.8 and 4.10.x up to, excluding 4.10.3, when used in AD DC mode. A man in the middle attacker could use this flaw to intercept the request to the KDC and replace the user name (principal) in the request with any desired user name (principal) that exists in the KDC effectively obtaining a ticket for that principal.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade heimdalUpgrade samba | Jul 31, 2019 | Jul 31, 2019 |
| Apple Osx Heimdal | — | Apply Apple macOS Security Update 2019-004 High Sierra | Jul 23, 2019 | Jul 22, 2019 |
| Debian | — | Upgrade heimdalUpgrade samba | May 15, 2019 | May 15, 2019 |
| Freebsd | — | Upgrade samba410Upgrade samba47Upgrade samba46Upgrade samba48Upgrade samba49 | May 18, 2019 | May 14, 2019 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Jul 31, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-common-libsUpgrade libsmbclientUpgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade samba-libsUpgrade sambaUpgrade samba-pythonUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba-common-toolsUpgrade samba-commonUpgrade samba-clientUpgrade libwbclient | Nov 3, 2020 | Jul 31, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libwbclientUpgrade samba-client-libsUpgrade samba-clientUpgrade samba-winbindUpgrade samba-commonUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade samba-pythonUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade libsmbclientUpgrade samba | Sep 28, 2020 | Jul 31, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libwbclientUpgrade samba-client-libsUpgrade samba-commonUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade samba-pythonUpgrade samba-libsUpgrade samba-winbindUpgrade sambaUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-common-tools | Jun 3, 2020 | Jul 31, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python2-sambaUpgrade python3-sambaUpgrade samba-winbindUpgrade ctdb-testsUpgrade samba-krb5-printingUpgrade sambaUpgrade samba-testUpgrade samba-libsUpgrade libwbclientUpgrade python2-samba-testUpgrade samba-client-libsUpgrade samba-pidlUpgrade libsmbclientUpgrade python3-samba-testUpgrade samba-dc-libsUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade ctdbUpgrade samba-test-libsUpgrade samba-clientUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-modulesUpgrade samba-commonUpgrade samba-common-tools | Jan 3, 2020 | Jul 31, 2019 |
| Samba | — | Upgrade to Samba version 4.10.3Upgrade to Samba version 4.9.8Upgrade to Samba version 4.8.12 | May 24, 2019 | May 24, 2019 |
| Suse | — | Upgrade samba-clientUpgrade samba-client-libsUpgrade samba-python3Upgrade samba-gpupdateUpgrade libwbclient-develUpgrade libsamdb0-32bitUpgrade libsamba-errors0Upgrade libsmbldap-develUpgrade libsamba-hostconfig0-32bitUpgrade libwbclient0-32bitUpgrade libndr1-32bitUpgrade libndr-develUpgrade libndr-standard0-32bitUpgrade libndr-standard-develUpgrade samba-dsdb-modulesUpgrade libndr-standard0Upgrade libsamba-errors-develUpgrade libdcerpc0Upgrade libdcerpc-binding0-32bitUpgrade samba-libs-python3-32bitUpgrade samba-winbind-libs-32bitUpgrade libndr-krb5pac0Upgrade libndr-nbt0-32bitUpgrade libnetapi-develUpgrade libsamba-credentials0Upgrade libnetapi0-32bitUpgrade libsamba-passdb-develUpgrade libsamba-hostconfig-develUpgrade samba-core-develUpgrade libsamba-policy-python3-develUpgrade libsamdb-develUpgrade libndr0-32bitUpgrade samba-client-32bitUpgrade samba-winbind-libsUpgrade libdcerpc-samr0Upgrade libsamba-util0Upgrade libsmbconf-develUpgrade samba-ldb-ldapUpgrade libsamba-passdb0Upgrade samba-client-libs-32bitUpgrade libndr-krb5pac-develUpgrade libsamba-passdb0-32bitUpgrade libsmbconf0Upgrade libndr-nbt0Upgrade libnetapi0Upgrade libdcerpc-samr-develUpgrade samba-ad-dc-libsUpgrade samba-develUpgrade libsamba-policy-develUpgrade libsmbldap2Upgrade libndr-krb5pac0-32bitUpgrade libtevent-util0Upgrade libsmbclient0-32bitUpgrade samba-winbind-32bitUpgrade libtevent-util0-32bitUpgrade libdcerpc0-32bitUpgrade sambaUpgrade libwbclient0Upgrade ctdbUpgrade libsmbclient0Upgrade libheimdalUpgrade libsmbldap2-32bitUpgrade samba-cephUpgrade libsamdb0Upgrade libsamba-util-develUpgrade samba-docUpgrade libsamba-util0-32bitUpgrade libdcerpc-binding0Upgrade libtevent-util-develUpgrade samba-libsUpgrade libndr-nbt-develUpgrade libsmbclient-develUpgrade libndr1Upgrade libheimdal-develUpgrade libsamba-errors0-32bitUpgrade libsamba-credentials0-32bitUpgrade libsmbconf0-32bitUpgrade samba-winbindUpgrade libdcerpc-develUpgrade libsamba-hostconfig0Upgrade libndr0Upgrade libsamba-credentials-develUpgrade libsamba-policy0-python3Upgrade samba-libs-python3Upgrade samba-libs-32bit | Nov 28, 2022 | Jul 31, 2019 |
| Ubuntu | — | Upgrade heimdal-kcm (Ubuntu Pro)Upgrade heimdal-clients-x (Ubuntu Pro)Upgrade heimdal-serversUpgrade libgssapi3-heimdalUpgrade libgssapi3-heimdal (Ubuntu Pro)Upgrade heimdal-clientsUpgrade libkrb5-26-heimdalUpgrade heimdal-servers (Ubuntu Pro)Upgrade heimdal-kdcUpgrade sambaUpgrade heimdal-kdc (Ubuntu Pro)Upgrade libkdc2-heimdal (Ubuntu Pro)Upgrade heimdal-servers-x (Ubuntu Pro)Upgrade libkrb5-26-heimdal (Ubuntu Pro)Upgrade heimdal-clients (Ubuntu Pro)Upgrade libkdc2-heimdalUpgrade heimdal-kcmUpgrade samba (Ubuntu Pro) | May 15, 2019 | May 14, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub