Summary
USN-3353-1 fixed a vulnerability in Heimdal. This update provides
the corresponding update for Samba.
Jeffrey Altman, Viktor Dukhovni, and Nicolas Williams discovered
that Samba clients incorrectly trusted unauthenticated portions of
Kerberos tickets. A remote attacker could use this to impersonate
trusted network servers or perform other attacks.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | samba | 2:4.3.11+dfsg-0ubuntu0.14.04.10 |
| Ubuntu · 16.04 LTS 16.04:LTS | samba | 2:4.3.11+dfsg-0ubuntu0.16.04.9 |
Vulnerabilities 1
-
Unscored —
Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains servic…
References
-
report
https://ubuntu.com/security/CVE-2017-11103