A flaw was found in samba's Heimdal KDC implementation, versions 4.8.x up to, excluding 4.8.12, 4.9.x up to, excluding 4.9.8 and 4.10.x up to, excluding 4.10.3, when used in AD DC mode. A man in the middle attacker could use this flaw to intercept the request to the KDC and replace the user name (principal) in the request with any desired user name (principal) that exists in the KDC effectively obtaining a ticket for that principal.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade sambaUpgrade heimdal | Jul 31, 2019 | Jul 31, 2019 |
| Apple Osx Heimdal | — | Apply Apple macOS Security Update 2019-004 High Sierra | Jul 23, 2019 | Jul 22, 2019 |
| Debian | — | Upgrade sambaUpgrade heimdal | May 15, 2019 | May 15, 2019 |
| Freebsd | — | Upgrade samba47Upgrade samba410Upgrade samba49Upgrade samba46Upgrade samba48 | May 18, 2019 | May 14, 2019 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Jul 31, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade sambaUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade samba-pythonUpgrade libwbclientUpgrade samba-commonUpgrade samba-clientUpgrade samba-libsUpgrade samba-client-libsUpgrade samba-common-libsUpgrade libsmbclient | Nov 3, 2020 | Jul 31, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade sambaUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-pythonUpgrade samba-libsUpgrade samba-commonUpgrade samba-winbindUpgrade samba-common-toolsUpgrade libsmbclientUpgrade libwbclientUpgrade samba-client-libs | Sep 28, 2020 | Jul 31, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libwbclientUpgrade samba-commonUpgrade samba-client-libsUpgrade samba-winbindUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-pythonUpgrade sambaUpgrade samba-libsUpgrade samba-clientUpgrade libsmbclientUpgrade samba-common-tools | Jun 3, 2020 | Jul 31, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-common-toolsUpgrade samba-clientUpgrade samba-test-libsUpgrade samba-commonUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade python3-samba-testUpgrade libsmbclientUpgrade ctdbUpgrade samba-dc-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-modulesUpgrade samba-testUpgrade python2-sambaUpgrade samba-client-libsUpgrade python2-samba-testUpgrade samba-krb5-printingUpgrade samba-winbindUpgrade ctdb-testsUpgrade libwbclientUpgrade samba-libsUpgrade python3-sambaUpgrade samba-pidlUpgrade samba | Jan 3, 2020 | Jul 31, 2019 |
| Samba | — | Upgrade to Samba version 4.9.8Upgrade to Samba version 4.8.12Upgrade to Samba version 4.10.3 | May 24, 2019 | May 24, 2019 |
| Suse | — | Upgrade libsamba-passdb0Upgrade libsamdb0-32bitUpgrade libndr-nbt0-32bitUpgrade libndr-standard0Upgrade libnetapi-develUpgrade libwbclient-develUpgrade samba-winbind-libsUpgrade libsamba-passdb-develUpgrade libdcerpc-samr0Upgrade libdcerpc-binding0-32bitUpgrade samba-dsdb-modulesUpgrade libsmbldap-develUpgrade libsamba-util0Upgrade libdcerpc0Upgrade libsamba-hostconfig0-32bitUpgrade samba-ldb-ldapUpgrade libsamba-credentials0Upgrade samba-client-libsUpgrade libsamba-hostconfig-develUpgrade samba-client-libs-32bitUpgrade libndr-standard0-32bitUpgrade libsamba-errors-develUpgrade samba-python3Upgrade libnetapi0-32bitUpgrade libndr-develUpgrade samba-gpupdateUpgrade samba-clientUpgrade libsamdb-develUpgrade libndr1-32bitUpgrade libndr-krb5pac0Upgrade libsmbconf-develUpgrade samba-core-develUpgrade samba-winbind-libs-32bitUpgrade samba-client-32bitUpgrade libndr-standard-develUpgrade samba-libs-python3-32bitUpgrade libndr0-32bitUpgrade libwbclient0-32bitUpgrade libsamba-errors0Upgrade libndr-krb5pac-develUpgrade libsamba-policy-python3-develUpgrade libsamba-passdb0-32bitUpgrade libsmbldap2-32bitUpgrade samba-cephUpgrade libtevent-util-develUpgrade libndr-nbt0Upgrade libdcerpc-binding0Upgrade libndr1Upgrade libsamba-credentials0-32bitUpgrade samba-winbindUpgrade libsmbconf0Upgrade libsmbconf0-32bitUpgrade libdcerpc-develUpgrade libndr0Upgrade libsamba-credentials-develUpgrade libheimdalUpgrade samba-ad-dc-libsUpgrade sambaUpgrade libsmbclient0Upgrade libwbclient0Upgrade ctdbUpgrade libsamba-hostconfig0Upgrade libsamba-util-develUpgrade samba-libs-python3Upgrade libsamba-policy-develUpgrade libndr-krb5pac0-32bitUpgrade libtevent-util0Upgrade samba-develUpgrade samba-libs-32bitUpgrade libnetapi0Upgrade libdcerpc-samr-develUpgrade libdcerpc0-32bitUpgrade samba-winbind-32bitUpgrade libsmbclient-develUpgrade libsmbclient0-32bitUpgrade samba-libsUpgrade libsamdb0Upgrade libsmbldap2Upgrade libtevent-util0-32bitUpgrade samba-docUpgrade libsamba-policy0-python3Upgrade libsamba-util0-32bitUpgrade libsamba-errors0-32bitUpgrade libndr-nbt-develUpgrade libheimdal-devel | Nov 28, 2022 | Jul 31, 2019 |
| Ubuntu | — | Upgrade heimdal-kcm (Ubuntu Pro)Upgrade libkrb5-26-heimdalUpgrade libgssapi3-heimdalUpgrade heimdal-clients-x (Ubuntu Pro)Upgrade libgssapi3-heimdal (Ubuntu Pro)Upgrade heimdal-servers (Ubuntu Pro)Upgrade libkdc2-heimdal (Ubuntu Pro)Upgrade sambaUpgrade heimdal-kdc (Ubuntu Pro)Upgrade heimdal-kdcUpgrade heimdal-clientsUpgrade heimdal-serversUpgrade heimdal-servers-x (Ubuntu Pro)Upgrade libkrb5-26-heimdal (Ubuntu Pro)Upgrade heimdal-kcmUpgrade libkdc2-heimdalUpgrade samba (Ubuntu Pro)Upgrade heimdal-clients (Ubuntu Pro) | May 15, 2019 | May 14, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub