vulnerability
FreeBSD: VID-793a0072-7822-11e9-81e2-005056a311d1 (CVE-2018-16860): samba -- multiple vulnerabilities
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 6 | (AV:N/AC:M/Au:S/C:P/I:P/A:P) | May 14, 2019 | May 18, 2019 | Dec 10, 2025 |
Severity
6
CVSS
(AV:N/AC:M/Au:S/C:P/I:P/A:P)
Published
May 14, 2019
Added
May 18, 2019
Modified
Dec 10, 2025
Description
The samba project reports: The checksum validation in the S4U2Self handler in the embedded Heimdal KDC did not first confirm that the checksum was keyed, allowing replacement of the requested target (client) principal Authenticated users with write permission can trigger a symlink traversal to write or detect files outside the Samba share.
Solutions
freebsd-upgrade-package-samba46freebsd-upgrade-package-samba47freebsd-upgrade-package-samba48freebsd-upgrade-package-samba49freebsd-upgrade-package-samba410
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.