Vulnerability in samba's Heimdal KDC Implementation
Summary
CVE-2018-16860: A flaw was found in samba's Heimdal KDC implementation, versions 4.8.x up to, excluding 4.8.12, 4.9.x up to, excluding 4.9.8 and 4.10.x up to, excluding 4.10.3, when used in AD DC mode. Affects heimdal across 2 version ranges.
>= 5a9d09fee44052e18ce241ec28f78498d2e20d73, < a72d4598bf4a2186769f25050663f4779ea581e0
< 7.5.0-r4
Fixed in 7.5.0-r4. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Samba is an open-source software suite that provides file and print services for various operating systems, including Windows. It includes an implementation of the Heimdal Kerberos Key Distribution Center (KDC), which is responsible for authenticating users and issuing tickets. This vulnerability affects versions 4.8.x up to, excluding 4.8.12, 4.9.x up to, excluding 4.9.8, and 4.10.x up to, excluding 4.10.3 when used in Active Directory Domain Controller (AD DC) mode.
Vulnerability Detail
The vulnerability, identified as CVE-2018-16860, allows a man-in-the-middle attacker to intercept requests to the KDC and replace the requested user name (principal) with any desired user name that exists in the KDC. This manipulation effectively grants the attacker a ticket for the substituted principal, potentially leading to unauthorized access and privilege escalation within the affected system.
How To Fix
Minimum fixed version
7.5.0-r4
This is the first release that contains the fix.
sudo apk add --upgrade heimdalTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
The vulnerability in samba's Heimdal KDC implementation allows a man-in-the-middle attacker to impersonate any user in the KDC, potentially leading to unauthorized access and privilege escalation. It is crucial to update the affected packages to the recommended versions to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for heimdal →
FAQ
The vulnerability allows an attacker to impersonate any user in the KDC, potentially gaining unauthorized access and escalating privileges within the affected system.
Versions 4.8.x up to, excluding 4.8.12, 4.9.x up to, excluding 4.9.8, and 4.10.x up to, excluding 4.10.3 are affected.
There is no known exploit available for this vulnerability at the time of this report.
Updating the affected packages to the recommended versions is the primary mitigation for this vulnerability.
You can find more information about this vulnerability in the provided source link.
Related vulnerabilities
Recent vulnerabilities recorded for heimdal.
