vulnerability

FreeBSD: VID-793A0072-7822-11E9-81E2-005056A311D1 (CVE-2018-16860): samba -- multiple vulnerabilities

Severity
6
CVSS
(AV:N/AC:M/Au:S/C:P/I:P/A:P)
Published
May 14, 2019
Added
May 18, 2019
Modified
Aug 13, 2019

Description

Details for this vulnerability have not been published by NIST at this point. Descriptions from software vendor advisories for this issue are provided below.


From VID-793A0072-7822-11E9-81E2-005056A311D1:




The samba project reports:



The checksum validation in the S4U2Self handler in the embedded Heimdal KDC


did not first confirm that the checksum was keyed, allowing replacement of the


requested target (client) principal




Authenticated users with write permission can trigger a symlink traversal to write


or detect files outside the Samba share.




Solution(s)

freebsd-upgrade-package-samba410freebsd-upgrade-package-samba46freebsd-upgrade-package-samba47freebsd-upgrade-package-samba48freebsd-upgrade-package-samba49
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.