Not rated
CVE-2020-25721 Kerberos acceptors need easy access to stable AD identifiers (eg objectSid)
Description
Kerberos acceptors need easy access to stable AD identifiers (eg objectSid). Samba as an AD DC now provides a way for Linux applications to obtain a reliable SID (and samAccountName) in issued tickets.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| samba | Versions not published |
References
- www.samba.org www.samba.org
- bugzilla.samba.org bugzilla.samba.org
- bugzilla.redhat.com bugzilla.redhat.com
- GLSA-202309-06 security.gentoo.org
Timeline
- Published
- Last modified
Other CVEs of samba
The 40 CVEs of samba →
CVE-2023-4154
A design flaw was found in Samba's DirSync control implementation, which exposes passwords and secrets in Active…
7.5
High
CVE-2023-0614
The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was…
7.7
High
CVE-2023-0922
The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset…
5.9
Medium
CVE-2023-0225
A flaw was found in Samba
4.3
Medium