vulnerability
FreeBSD: VID-793A0072-7822-11E9-81E2-005056A311D1 (CVE-2018-16860): samba -- multiple vulnerabilities
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 6 | (AV:N/AC:M/Au:S/C:P/I:P/A:P) | May 14, 2019 | May 18, 2019 | Aug 13, 2019 |
Severity
6
CVSS
(AV:N/AC:M/Au:S/C:P/I:P/A:P)
Published
May 14, 2019
Added
May 18, 2019
Modified
Aug 13, 2019
Description
Details for this vulnerability have not been published by NIST at this point. Descriptions from software vendor advisories for this issue are provided below.
From VID-793A0072-7822-11E9-81E2-005056A311D1:
The samba project reports:
The checksum validation in the S4U2Self handler in the embedded Heimdal KDC
did not first confirm that the checksum was keyed, allowing replacement of the
requested target (client) principal
Authenticated users with write permission can trigger a symlink traversal to write
or detect files outside the Samba share.
Solution(s)
freebsd-upgrade-package-samba410freebsd-upgrade-package-samba46freebsd-upgrade-package-samba47freebsd-upgrade-package-samba48freebsd-upgrade-package-samba49
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.