A flaw was found in samba's Heimdal KDC implementation, versions 4.8.x up to, excluding 4.8.12, 4.9.x up to, excluding 4.9.8 and 4.10.x up to, excluding 4.10.3, when used in AD DC mode. A man in the middle attacker could use this flaw to intercept the request to the KDC and replace the user name (principal) in the request with any desired user name (principal) that exists in the KDC effectively obtaining a ticket for that principal.
{
"binaries": [
{
"binary_name": "ctdb",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.20"
},
{
"binary_name": "libnss-winbind",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.20"
},
{
"binary_name": "libpam-winbind",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.20"
},
{
"binary_name": "libparse-pidl-perl",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.20"
},
{
"binary_name": "libsmbclient",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.20"
},
{
"binary_name": "libsmbclient-dev",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.20"
},
{
"binary_name": "libwbclient-dev",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.20"
},
{
"binary_name": "libwbclient0",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.20"
},
{
"binary_name": "python-samba",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.20"
},
{
"binary_name": "registry-tools",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.20"
},
{
"binary_name": "samba",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.20"
},
{
"binary_name": "samba-common",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.20"
},
{
"binary_name": "samba-common-bin",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.20"
},
{
"binary_name": "samba-dev",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.20"
},
{
"binary_name": "samba-dsdb-modules",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.20"
},
{
"binary_name": "samba-libs",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.20"
},
{
"binary_name": "samba-testsuite",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.20"
},
{
"binary_name": "samba-vfs-modules",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.20"
},
{
"binary_name": "smbclient",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.20"
},
{
"binary_name": "winbind",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.20"
}
],
"availability": "No subscription required"
}{
"binaries": [
{
"binary_name": "heimdal-clients",
"binary_version": "7.5.0+dfsg-1ubuntu0.1"
},
{
"binary_name": "heimdal-dev",
"binary_version": "7.5.0+dfsg-1ubuntu0.1"
},
{
"binary_name": "heimdal-docs",
"binary_version": "7.5.0+dfsg-1ubuntu0.1"
},
{
"binary_name": "heimdal-kcm",
"binary_version": "7.5.0+dfsg-1ubuntu0.1"
},
{
"binary_name": "heimdal-kdc",
"binary_version": "7.5.0+dfsg-1ubuntu0.1"
},
{
"binary_name": "heimdal-multidev",
"binary_version": "7.5.0+dfsg-1ubuntu0.1"
},
{
"binary_name": "heimdal-servers",
"binary_version": "7.5.0+dfsg-1ubuntu0.1"
},
{
"binary_name": "libasn1-8-heimdal",
"binary_version": "7.5.0+dfsg-1ubuntu0.1"
},
{
"binary_name": "libgssapi3-heimdal",
"binary_version": "7.5.0+dfsg-1ubuntu0.1"
},
{
"binary_name": "libhcrypto4-heimdal",
"binary_version": "7.5.0+dfsg-1ubuntu0.1"
},
{
"binary_name": "libhdb9-heimdal",
"binary_version": "7.5.0+dfsg-1ubuntu0.1"
},
{
"binary_name": "libheimbase1-heimdal",
"binary_version": "7.5.0+dfsg-1ubuntu0.1"
},
{
"binary_name": "libheimntlm0-heimdal",
"binary_version": "7.5.0+dfsg-1ubuntu0.1"
},
{
"binary_name": "libhx509-5-heimdal",
"binary_version": "7.5.0+dfsg-1ubuntu0.1"
},
{
"binary_name": "libkadm5clnt7-heimdal",
"binary_version": "7.5.0+dfsg-1ubuntu0.1"
},
{
"binary_name": "libkadm5srv8-heimdal",
"binary_version": "7.5.0+dfsg-1ubuntu0.1"
},
{
"binary_name": "libkafs0-heimdal",
"binary_version": "7.5.0+dfsg-1ubuntu0.1"
},
{
"binary_name": "libkdc2-heimdal",
"binary_version": "7.5.0+dfsg-1ubuntu0.1"
},
{
"binary_name": "libkrb5-26-heimdal",
"binary_version": "7.5.0+dfsg-1ubuntu0.1"
},
{
"binary_name": "libotp0-heimdal",
"binary_version": "7.5.0+dfsg-1ubuntu0.1"
},
{
"binary_name": "libroken18-heimdal",
"binary_version": "7.5.0+dfsg-1ubuntu0.1"
},
{
"binary_name": "libsl0-heimdal",
"binary_version": "7.5.0+dfsg-1ubuntu0.1"
},
{
"binary_name": "libwind0-heimdal",
"binary_version": "7.5.0+dfsg-1ubuntu0.1"
}
],
"availability": "No subscription required"
}{
"binaries": [
{
"binary_name": "ctdb",
"binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.10"
},
{
"binary_name": "libnss-winbind",
"binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.10"
},
{
"binary_name": "libpam-winbind",
"binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.10"
},
{
"binary_name": "libparse-pidl-perl",
"binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.10"
},
{
"binary_name": "libsmbclient",
"binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.10"
},
{
"binary_name": "libsmbclient-dev",
"binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.10"
},
{
"binary_name": "libwbclient-dev",
"binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.10"
},
{
"binary_name": "libwbclient0",
"binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.10"
},
{
"binary_name": "python-samba",
"binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.10"
},
{
"binary_name": "registry-tools",
"binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.10"
},
{
"binary_name": "samba",
"binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.10"
},
{
"binary_name": "samba-common",
"binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.10"
},
{
"binary_name": "samba-common-bin",
"binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.10"
},
{
"binary_name": "samba-dev",
"binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.10"
},
{
"binary_name": "samba-dsdb-modules",
"binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.10"
},
{
"binary_name": "samba-libs",
"binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.10"
},
{
"binary_name": "samba-testsuite",
"binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.10"
},
{
"binary_name": "samba-vfs-modules",
"binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.10"
},
{
"binary_name": "smbclient",
"binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.10"
},
{
"binary_name": "winbind",
"binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.10"
}
],
"availability": "No subscription required"
}{
"binaries": [
{
"binary_name": "heimdal-clients",
"binary_version": "1.6~git20131207+dfsg-1ubuntu1.2+esm1"
},
{
"binary_name": "heimdal-clients-x",
"binary_version": "1.6~git20131207+dfsg-1ubuntu1.2+esm1"
},
{
"binary_name": "heimdal-dev",
"binary_version": "1.6~git20131207+dfsg-1ubuntu1.2+esm1"
},
{
"binary_name": "heimdal-docs",
"binary_version": "1.6~git20131207+dfsg-1ubuntu1.2+esm1"
},
{
"binary_name": "heimdal-kcm",
"binary_version": "1.6~git20131207+dfsg-1ubuntu1.2+esm1"
},
{
"binary_name": "heimdal-kdc",
"binary_version": "1.6~git20131207+dfsg-1ubuntu1.2+esm1"
},
{
"binary_name": "heimdal-multidev",
"binary_version": "1.6~git20131207+dfsg-1ubuntu1.2+esm1"
},
{
"binary_name": "heimdal-servers",
"binary_version": "1.6~git20131207+dfsg-1ubuntu1.2+esm1"
},
{
"binary_name": "heimdal-servers-x",
"binary_version": "1.6~git20131207+dfsg-1ubuntu1.2+esm1"
},
{
"binary_name": "libasn1-8-heimdal",
"binary_version": "1.6~git20131207+dfsg-1ubuntu1.2+esm1"
},
{
"binary_name": "libgssapi3-heimdal",
"binary_version": "1.6~git20131207+dfsg-1ubuntu1.2+esm1"
},
{
"binary_name": "libhcrypto4-heimdal",
"binary_version": "1.6~git20131207+dfsg-1ubuntu1.2+esm1"
},
{
"binary_name": "libhdb9-heimdal",
"binary_version": "1.6~git20131207+dfsg-1ubuntu1.2+esm1"
},
{
"binary_name": "libheimbase1-heimdal",
"binary_version": "1.6~git20131207+dfsg-1ubuntu1.2+esm1"
},
{
"binary_name": "libheimntlm0-heimdal",
"binary_version": "1.6~git20131207+dfsg-1ubuntu1.2+esm1"
},
{
"binary_name": "libhx509-5-heimdal",
"binary_version": "1.6~git20131207+dfsg-1ubuntu1.2+esm1"
},
{
"binary_name": "libkadm5clnt7-heimdal",
"binary_version": "1.6~git20131207+dfsg-1ubuntu1.2+esm1"
},
{
"binary_name": "libkadm5srv8-heimdal",
"binary_version": "1.6~git20131207+dfsg-1ubuntu1.2+esm1"
},
{
"binary_name": "libkafs0-heimdal",
"binary_version": "1.6~git20131207+dfsg-1ubuntu1.2+esm1"
},
{
"binary_name": "libkdc2-heimdal",
"binary_version": "1.6~git20131207+dfsg-1ubuntu1.2+esm1"
},
{
"binary_name": "libkrb5-26-heimdal",
"binary_version": "1.6~git20131207+dfsg-1ubuntu1.2+esm1"
},
{
"binary_name": "libotp0-heimdal",
"binary_version": "1.6~git20131207+dfsg-1ubuntu1.2+esm1"
},
{
"binary_name": "libroken18-heimdal",
"binary_version": "1.6~git20131207+dfsg-1ubuntu1.2+esm1"
},
{
"binary_name": "libsl0-heimdal",
"binary_version": "1.6~git20131207+dfsg-1ubuntu1.2+esm1"
},
{
"binary_name": "libwind0-heimdal",
"binary_version": "1.6~git20131207+dfsg-1ubuntu1.2+esm1"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}{
"binaries": [
{
"binary_name": "libnss-winbind",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1"
},
{
"binary_name": "libpam-smbpass",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1"
},
{
"binary_name": "libpam-winbind",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1"
},
{
"binary_name": "libparse-pidl-perl",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1"
},
{
"binary_name": "libsmbclient",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1"
},
{
"binary_name": "libsmbclient-dev",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1"
},
{
"binary_name": "libsmbsharemodes-dev",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1"
},
{
"binary_name": "libsmbsharemodes0",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1"
},
{
"binary_name": "libwbclient-dev",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1"
},
{
"binary_name": "libwbclient0",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1"
},
{
"binary_name": "python-samba",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1"
},
{
"binary_name": "registry-tools",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1"
},
{
"binary_name": "samba",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1"
},
{
"binary_name": "samba-common",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1"
},
{
"binary_name": "samba-common-bin",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1"
},
{
"binary_name": "samba-dev",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1"
},
{
"binary_name": "samba-dsdb-modules",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1"
},
{
"binary_name": "samba-libs",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1"
},
{
"binary_name": "samba-testsuite",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1"
},
{
"binary_name": "samba-vfs-modules",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1"
},
{
"binary_name": "smbclient",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1"
},
{
"binary_name": "winbind",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}{
"binaries": [
{
"binary_name": "heimdal-clients",
"binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm1"
},
{
"binary_name": "heimdal-dev",
"binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm1"
},
{
"binary_name": "heimdal-docs",
"binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm1"
},
{
"binary_name": "heimdal-kcm",
"binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm1"
},
{
"binary_name": "heimdal-kdc",
"binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm1"
},
{
"binary_name": "heimdal-multidev",
"binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm1"
},
{
"binary_name": "heimdal-servers",
"binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm1"
},
{
"binary_name": "libasn1-8-heimdal",
"binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm1"
},
{
"binary_name": "libgssapi3-heimdal",
"binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm1"
},
{
"binary_name": "libhcrypto4-heimdal",
"binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm1"
},
{
"binary_name": "libhdb9-heimdal",
"binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm1"
},
{
"binary_name": "libheimbase1-heimdal",
"binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm1"
},
{
"binary_name": "libheimntlm0-heimdal",
"binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm1"
},
{
"binary_name": "libhx509-5-heimdal",
"binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm1"
},
{
"binary_name": "libkadm5clnt7-heimdal",
"binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm1"
},
{
"binary_name": "libkadm5srv8-heimdal",
"binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm1"
},
{
"binary_name": "libkafs0-heimdal",
"binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm1"
},
{
"binary_name": "libkdc2-heimdal",
"binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm1"
},
{
"binary_name": "libkrb5-26-heimdal",
"binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm1"
},
{
"binary_name": "libotp0-heimdal",
"binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm1"
},
{
"binary_name": "libroken18-heimdal",
"binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm1"
},
{
"binary_name": "libsl0-heimdal",
"binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm1"
},
{
"binary_name": "libwind0-heimdal",
"binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm1"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}