CVEvulnerability

CVE-2016-2125

6.5 MEDIUM Published 2018-10-31 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-10-31
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 3.0 ([email protected])
6.4 MEDIUM — CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
CVSS 2.0 ([email protected])
3.3 LOW — AV:A/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-20, CWE-287

Description

It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users.

Affected configurations

• samba samba (>= 3.0.25 < 4.3.13) • samba samba (>= 4.4.0 < 4.4.8) • samba samba (>= 4.5.0 < 4.5.3) • redhat gluster storage 3.0 • redhat enterprise linux desktop 6.0 • redhat enterprise linux desktop 7.0 • redhat enterprise linux server 6.0 • redhat enterprise linux server 7.0 • redhat enterprise linux server aus 7.4 • redhat enterprise linux server aus 7.6 • redhat enterprise linux server eus 7.3 • redhat enterprise linux server eus 7.4 • redhat enterprise linux server eus 7.5 • redhat enterprise linux server eus 7.6 • redhat enterprise linux server tus 7.3 • redhat enterprise linux server tus 7.6 • redhat enterprise linux workstation 6.0 • redhat enterprise linux workstation 7.0

Related

Weakness · CWE (2)

  • CWE-20 Improper Input Validation weakness
  • CWE-287 Improper Authentication weakness

References