Vulnerability Description
It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Samba | Samba | >= 3.0.25, < 4.3.13 |
| Redhat | Gluster Storage | 3.0 |
| Redhat | Enterprise Linux Desktop | 6.0 |
| Redhat | Enterprise Linux Server | 6.0 |
| Redhat | Enterprise Linux Server Aus | 7.4 |
| Redhat | Enterprise Linux Server Eus | 7.3 |
| Redhat | Enterprise Linux Server Tus | 7.3 |
| Redhat | Enterprise Linux Workstation | 6.0 |
Related Weaknesses (CWE)
References
- http://rhn.redhat.com/errata/RHSA-2017-0494.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0495.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0662.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0744.htmlThird Party Advisory
- http://www.securityfocus.com/bid/94988Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1037494Third Party AdvisoryVDB Entry
- https://access.redhat.com/errata/RHSA-2017:1265Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-2125Issue TrackingMitigationThird Party Advisory
- https://www.samba.org/samba/security/CVE-2016-2125.htmlMitigationPatchVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0494.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0495.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0662.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0744.htmlThird Party Advisory
- http://www.securityfocus.com/bid/94988Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1037494Third Party AdvisoryVDB Entry
FAQ
What is CVE-2016-2125?
CVE-2016-2125 is a vulnerability with a CVSS score of 6.5 (MEDIUM). It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subseq...
How severe is CVE-2016-2125?
CVE-2016-2125 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-2125?
Check the references section above for vendor advisories and patch information. Affected products include: Samba Samba, Redhat Gluster Storage, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Server, Redhat Enterprise Linux Server Aus.