Slackware Linux 15.0 / current samba Multiple Vulnerabilities (SSA:2022-351-01)

The version of samba installed on the remote host is prior to 4.15.13 / 4.17.4. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-351-01 advisory. - Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022...

CVE-2022-45141

Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite the target server supporting better encryption...

CVE-2022-38023

A flaw was found in samba. The Netlogon RPC implementations may use the rc4-hmac encryption algorithm, which is considered weak and should be avoided even if the client supports more modern encryption types. This issue could allow an attacker who knows the plain text content communicated between...

CVE-2022-37966

Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability...

CVE-2022-45141

Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite the target server supporting better encryption...

Samba 加密问题漏洞

Samba is the standard Windows interoperability program suite for Linux and Unix. A security vulnerability exists in samba versions prior to samba 4.15.13, samba versions prior to samba 4.16.8, which stems from the fact that a Samba AD DC using Heimdal can force the issuance of Kerberos tickets...

Kerberos constrained delegation ticket

Description Kerberos constrained delegation, known also as S4U2Proxy, requires that the intermediate service present to the KDC a valid Kerberos ticket including the PAC obtained by the user as evidence that they had authenticated, so that a new ticket can be issued for the target server. The...

KB5021651: Out-of-band update for Windows Server 2008 R2: November 18, 2022

KB5021651: Out-of-band update for Windows Server 2008 R2: November 18, 2022 Summary This update includes improvements for the following: Addresses a known issue that affects Windows Servers that have the Domain Controller DC role. They might have Kerberos authentication issues if both of the...

November 17, 2022—KB5021654 (OS Build 14393.5502) Out-of-band

None None...

November 17, 2022—KB5021656 (OS Build 20348.1251) Out-of-band

None None...

The vulnerability of the Kerberos protocol for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Kerberos protocol for Windows operating systems lies in the use of the cryptographic algorithm RC4-HMAC, which has vulnerabilities. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

Metasploit Weekly Wrap-Up

ADCS - ESC Vulnerable certificate template finder Our very own Grant Willcox has developed a new module which allows users to query a LDAP server for vulnerable Active Directory Certificate Services AD CS certificate templates. The module will print the detected certificate details, and the attac...

CVE-2022-37966

CVE-2022-37966 is the Windows Kerberos RC4-HMAC Elevation of Privilege vulnerability. Reports in Samba advisories identify this CVE as affecting Samba deployments (e.g., Samba AD DC/members) where RC4-HMAC could be used for Kerberos tickets, allowing elevated access. Remediation focuses on applyi...

CVE-2022-37966 Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability

...

Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability

...

PT-2022-5459 · Microsoft +7 · Windows Kerberos +9

Name of the Vulnerable Software and Affected Versions: Windows Kerberos versions prior to the update that addresses the RC4-HMAC vulnerability Samba Active Directory DC affected versions not specified Description: The issue is related to the implementation of the Kerberos protocol in Windows...

PT-2022-6084

Name of the Vulnerable Software and Affected Versions Samba Active Directory DCs affected versions not specified Description The issue is related to the use of the RC4-HMAC cryptographic algorithm in the implementation of the Heimdal Kerberos protocol in Samba. This can allow a remote attacker to...

Exploit for CVE-2022-33679

CVE-2022-33679 One day based on https://googleproject...

RC4 Is Still Considered Harmful

By James Forshaw, Project Zero I've been spending a lot of time researching Windows authentication implementations, specifically Kerberos. In June 2022 I found an interesting issue number 2310 with the handling of RC4 encryption that allowed you to authenticate as another user if you could either...

CVE-2022-33647

creationtimestamp| type| source ---|---|--- 2022-10-26 07:00:06+00:00| published-proof-of-concept| https://t.me/TopCyberTechNews/189 2022-10-27 19:48:00+00:00| seen| https://googleprojectzero.blogspot.com/2022/10/rc4-is-still-considered-harmful.html 2022-10-31 19:01:56+00:00| seen|...