6.4 Medium
CVSS3
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
6.6 Medium
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
77.3%
It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users.
[
{
"product": "samba",
"vendor": "[UNKNOWN]",
"versions": [
{
"status": "affected",
"version": "4.5.3"
},
{
"status": "affected",
"version": "4.4.8"
},
{
"status": "affected",
"version": "4.3.13"
}
]
}
]
rhn.redhat.com/errata/RHSA-2017-0494.html
rhn.redhat.com/errata/RHSA-2017-0495.html
rhn.redhat.com/errata/RHSA-2017-0662.html
rhn.redhat.com/errata/RHSA-2017-0744.html
www.securityfocus.com/bid/94988
www.securitytracker.com/id/1037494
access.redhat.com/errata/RHSA-2017:1265
bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-2125
www.samba.org/samba/security/CVE-2016-2125.html
6.4 Medium
CVSS3
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
6.6 Medium
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
77.3%