| Package | Affected versions | Patched versions |
|---|---|---|
| samba | ≥ 4.0.0, < 4.13.14≥ 4.14.0, < 4.14.10≥ 4.15.0, < 4.15.2 | 4.13.144.14.104.15.2 |
A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could become confused about the user a ticket represents if it did not strictly require a Kerberos PAC and always use the SIDs found within. The result could include total domain compromise.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free