Поиск уязвимостей
Количество 13
Количество 13
CVE-2017-11103
Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In _krb5_extract_ticket() the KDC-REP service name must be obtained from the encrypted version stored in 'enc_part' instead of the unencrypted version stored in 'ticket'. Use of the unencrypted version provides an opportunity for successful server impersonation and other attacks. NOTE: this CVE is only for Heimdal and other products that embed Heimdal code; it does not apply to other instances in which this part of the Kerberos 5 protocol specification is violated.
CVE-2017-11103
Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In _krb5_extract_ticket() the KDC-REP service name must be obtained from the encrypted version stored in 'enc_part' instead of the unencrypted version stored in 'ticket'. Use of the unencrypted version provides an opportunity for successful server impersonation and other attacks. NOTE: this CVE is only for Heimdal and other products that embed Heimdal code; it does not apply to other instances in which this part of the Kerberos 5 protocol specification is violated.
CVE-2017-11103
Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In _krb5_extract_ticket() the KDC-REP service name must be obtained from the encrypted version stored in 'enc_part' instead of the unencrypted version stored in 'ticket'. Use of the unencrypted version provides an opportunity for successful server impersonation and other attacks. NOTE: this CVE is only for Heimdal and other products that embed Heimdal code; it does not apply to other instances in which this part of the Kerberos 5 protocol specification is violated.
CVE-2017-11103
Heimdal before 7.4 allows remote attackers to impersonate services wit ...
openSUSE-SU-2017:2311-1
Security update for samba and resource-agents
SUSE-SU-2017:2237-1
Security update for samba and resource-agents
GHSA-7cm4-q9wm-9w5g
Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In _krb5_extract_ticket() the KDC-REP service name must be obtained from the encrypted version stored in 'enc_part' instead of the unencrypted version stored in 'ticket'. Use of the unencrypted version provides an opportunity for successful server impersonation and other attacks. NOTE: this CVE is only for Heimdal and other products that embed Heimdal code; it does not apply to other instances in which this part of the Kerberos 5 protocol specification is violated.
BDU:2021-01424
Уязвимость функции _krb5_extract_ticket() пакета программ сетевого взаимодействия Samba, связанная с недостатком механизма проверки подлинности данных, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
openSUSE-SU-2017:2180-1
Security update for libheimdal
ALT-PU-2017-1857
ALT-PU-2017-1857: package `samba-DC` update to version 4.6.6-alt1.S1
ALT-PU-2017-1856
ALT-PU-2017-1856: package `samba` update to version 4.6.6-alt1.S1
ALT-PU-2018-2489
ALT-PU-2018-2489: package `samba-DC` update to version 4.8.6-alt1
ALT-PU-2018-2488
ALT-PU-2018-2488: package `samba` update to version 4.8.6-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2017-11103 Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In _krb5_extract_ticket() the KDC-REP service name must be obtained from the encrypted version stored in 'enc_part' instead of the unencrypted version stored in 'ticket'. Use of the unencrypted version provides an opportunity for successful server impersonation and other attacks. NOTE: this CVE is only for Heimdal and other products that embed Heimdal code; it does not apply to other instances in which this part of the Kerberos 5 protocol specification is violated. | CVSS3: 8.1 | 5% Низкий | больше 9 лет назад |
 | CVE-2017-11103 Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In _krb5_extract_ticket() the KDC-REP service name must be obtained from the encrypted version stored in 'enc_part' instead of the unencrypted version stored in 'ticket'. Use of the unencrypted version provides an opportunity for successful server impersonation and other attacks. NOTE: this CVE is only for Heimdal and other products that embed Heimdal code; it does not apply to other instances in which this part of the Kerberos 5 protocol specification is violated. | CVSS3: 8.1 | 5% Низкий | больше 9 лет назад |
 | CVE-2017-11103 Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In _krb5_extract_ticket() the KDC-REP service name must be obtained from the encrypted version stored in 'enc_part' instead of the unencrypted version stored in 'ticket'. Use of the unencrypted version provides an opportunity for successful server impersonation and other attacks. NOTE: this CVE is only for Heimdal and other products that embed Heimdal code; it does not apply to other instances in which this part of the Kerberos 5 protocol specification is violated. | CVSS3: 8.1 | 5% Низкий | больше 9 лет назад |
| CVE-2017-11103 Heimdal before 7.4 allows remote attackers to impersonate services wit ... | CVSS3: 8.1 | 5% Низкий | больше 9 лет назад |
 | openSUSE-SU-2017:2311-1 Security update for samba and resource-agents | 5% Низкий | около 9 лет назад | |
| SUSE-SU-2017:2237-1 Security update for samba and resource-agents | 5% Низкий | около 9 лет назад | |
| GHSA-7cm4-q9wm-9w5g Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In _krb5_extract_ticket() the KDC-REP service name must be obtained from the encrypted version stored in 'enc_part' instead of the unencrypted version stored in 'ticket'. Use of the unencrypted version provides an opportunity for successful server impersonation and other attacks. NOTE: this CVE is only for Heimdal and other products that embed Heimdal code; it does not apply to other instances in which this part of the Kerberos 5 protocol specification is violated. | CVSS3: 8.1 | 5% Низкий | больше 4 лет назад |
 | BDU:2021-01424 Уязвимость функции _krb5_extract_ticket() пакета программ сетевого взаимодействия Samba, связанная с недостатком механизма проверки подлинности данных, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании | CVSS3: 8.1 | 5% Низкий | больше 9 лет назад |
| openSUSE-SU-2017:2180-1 Security update for libheimdal | около 9 лет назад | ||
| ALT-PU-2017-1857 ALT-PU-2017-1857: package `samba-DC` update to version 4.6.6-alt1.S1 | CVSS3: 8.1 | 5% Низкий | больше 9 лет назад |
| ALT-PU-2017-1856 ALT-PU-2017-1856: package `samba` update to version 4.6.6-alt1.S1 | CVSS3: 8.1 | 5% Низкий | больше 9 лет назад |
| ALT-PU-2018-2489 ALT-PU-2018-2489: package `samba-DC` update to version 4.8.6-alt1 | CVSS3: 9.8 | около 8 лет назад | |
| ALT-PU-2018-2488 ALT-PU-2018-2488: package `samba` update to version 4.8.6-alt1 | CVSS3: 9.8 | около 8 лет назад |
Уязвимостей на страницу