A flaw was found in samba's Heimdal KDC implementation, versions 4.8.x up to, excluding 4.8.12, 4.9.x up to, excluding 4.9.8 and 4.10.x up to, excluding 4.10.3, when used in AD DC mode. A man in the middle attacker could use this flaw to intercept the request to the KDC and replace the user name (principal) in the request with any desired user name (principal) that exists in the KDC effectively obtaining a ticket for that principal.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade heimdalUpgrade samba | Jul 31, 2019 | Jul 31, 2019 |
| Apple Osx Heimdal | — | Apply Apple macOS Security Update 2019-004 High Sierra | Jul 23, 2019 | Jul 22, 2019 |
| Debian | — | Upgrade heimdalUpgrade samba | May 15, 2019 | May 15, 2019 |
| Freebsd | — | Upgrade samba47Upgrade samba410Upgrade samba49Upgrade samba46Upgrade samba48 | May 18, 2019 | May 14, 2019 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Jul 31, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libsmbclientUpgrade samba-common-libsUpgrade samba-client-libsUpgrade samba-winbindUpgrade libwbclientUpgrade samba-pythonUpgrade samba-common-toolsUpgrade sambaUpgrade samba-winbind-modulesUpgrade samba-commonUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba-libs | Nov 3, 2020 | Jul 31, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-libsUpgrade samba-pythonUpgrade samba-clientUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade sambaUpgrade samba-commonUpgrade samba-winbindUpgrade libwbclientUpgrade samba-client-libs | Sep 28, 2020 | Jul 31, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-commonUpgrade samba-client-libsUpgrade libwbclientUpgrade samba-winbindUpgrade samba-clientUpgrade sambaUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-python | Jun 3, 2020 | Jul 31, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-winbind-clientsUpgrade libsmbclientUpgrade python3-samba-testUpgrade samba-commonUpgrade samba-dc-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade samba-test-libsUpgrade ctdbUpgrade samba-winbindUpgrade ctdb-testsUpgrade python3-sambaUpgrade python2-sambaUpgrade libwbclientUpgrade samba-client-libsUpgrade python2-samba-testUpgrade sambaUpgrade samba-testUpgrade samba-libsUpgrade samba-krb5-printingUpgrade samba-pidl | Jan 3, 2020 | Jul 31, 2019 |
| Samba | — | Upgrade to Samba version 4.10.3Upgrade to Samba version 4.8.12Upgrade to Samba version 4.9.8 | May 24, 2019 | May 24, 2019 |
| Suse | — | Upgrade samba-docUpgrade libsamba-util0-32bitUpgrade libsamba-policy0-python3Upgrade libsamdb0Upgrade libndr-nbt-develUpgrade libsmbconf0Upgrade libsmbldap2-32bitUpgrade samba-libs-32bitUpgrade libheimdalUpgrade libnetapi0Upgrade samba-cephUpgrade samba-winbindUpgrade libsamba-util-develUpgrade libdcerpc-binding0Upgrade libdcerpc0-32bitUpgrade libsmbclient0Upgrade samba-ad-dc-libsUpgrade libndr0Upgrade libsamba-credentials-develUpgrade libsamba-errors0-32bitUpgrade samba-libs-python3Upgrade libdcerpc-samr-develUpgrade samba-develUpgrade ctdbUpgrade libsmbconf0-32bitUpgrade libheimdal-develUpgrade samba-winbind-32bitUpgrade libsamba-credentials0-32bitUpgrade libndr1Upgrade samba-libsUpgrade libsamba-policy-develUpgrade libdcerpc-develUpgrade libsamba-hostconfig0Upgrade libsmbclient-develUpgrade libndr-nbt0Upgrade libwbclient0Upgrade sambaUpgrade libtevent-util0-32bitUpgrade libtevent-util-develUpgrade libndr-krb5pac0-32bitUpgrade libsmbclient0-32bitUpgrade libtevent-util0Upgrade libsmbldap2Upgrade libndr-krb5pac0Upgrade libsamdb-develUpgrade libsamba-hostconfig-develUpgrade samba-clientUpgrade libsmbconf-develUpgrade libsamba-util0Upgrade samba-ldb-ldapUpgrade libnetapi-develUpgrade libndr-standard0Upgrade libsamdb0-32bitUpgrade samba-winbind-libs-32bitUpgrade libsamba-passdb0Upgrade libdcerpc-samr0Upgrade samba-winbind-libsUpgrade libsamba-errors-develUpgrade libsamba-credentials0Upgrade samba-libs-python3-32bitUpgrade libsamba-errors0Upgrade samba-client-libs-32bitUpgrade libsamba-policy-python3-develUpgrade libndr-krb5pac-develUpgrade samba-python3Upgrade libsamba-passdb0-32bitUpgrade libnetapi0-32bitUpgrade libdcerpc-binding0-32bitUpgrade samba-gpupdateUpgrade libdcerpc0Upgrade libsamba-passdb-develUpgrade samba-core-develUpgrade libndr0-32bitUpgrade libwbclient0-32bitUpgrade libndr1-32bitUpgrade libndr-standard-develUpgrade libsamba-hostconfig0-32bitUpgrade samba-dsdb-modulesUpgrade samba-client-32bitUpgrade libwbclient-develUpgrade libsmbldap-develUpgrade libndr-develUpgrade libndr-standard0-32bitUpgrade libndr-nbt0-32bitUpgrade samba-client-libs | Nov 28, 2022 | Jul 31, 2019 |
| Ubuntu | — | Upgrade libkrb5-26-heimdal (Ubuntu Pro)Upgrade heimdal-kcmUpgrade samba (Ubuntu Pro)Upgrade heimdal-servers-x (Ubuntu Pro)Upgrade libkdc2-heimdalUpgrade heimdal-clients (Ubuntu Pro)Upgrade sambaUpgrade heimdal-servers (Ubuntu Pro)Upgrade heimdal-kdc (Ubuntu Pro)Upgrade heimdal-kcm (Ubuntu Pro)Upgrade heimdal-serversUpgrade libgssapi3-heimdalUpgrade heimdal-kdcUpgrade libkrb5-26-heimdalUpgrade heimdal-clients-x (Ubuntu Pro)Upgrade libgssapi3-heimdal (Ubuntu Pro)Upgrade heimdal-clientsUpgrade libkdc2-heimdal (Ubuntu Pro) | May 15, 2019 | May 14, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub