Executive Summary

Informations
NameCVE-2017-11103First vendor Publication2017-07-13
VendorCveLast vendor Modification2017-11-13

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:P/I:P/A:P)
Cvss Base Score6.8Attack RangeNetwork
Cvss Impact Score6.4Attack ComplexityMedium
Cvss Expoit Score8.6AuthenticationNone Required
Calculate full CVSS 2.0 Vectors scores

Detail

Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In _krb5_extract_ticket() the KDC-REP service name must be obtained from the encrypted version stored in 'enc_part' instead of the unencrypted version stored in 'ticket'. Use of the unencrypted version provides an opportunity for successful server impersonation and other attacks. NOTE: this CVE is only for Heimdal and other products that embed Heimdal code; it does not apply to other instances in which this part of the Kerberos 5 protocol specification is violated.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11103

CWE : Common Weakness Enumeration

%idName
100 %CWE-345Insufficient Verification of Data Authenticity

CPE : Common Platform Enumeration

TypeDescriptionCount
Application19
Application88
Os1

Nessus® Vulnerability Scanner

DateDescription
2017-11-03Name : The remote host is missing a macOS or Mac OS X security update that fixes mul...
File : macosx_SecUpd2017-004.nasl - Type : ACT_GATHER_INFO
2017-10-03Name : The remote host is missing a macOS update that fixes multiple security vulner...
File : macos_10_13.nasl - Type : ACT_GATHER_INFO
2017-08-31Name : The remote openSUSE host is missing a security update.
File : openSUSE-2017-987.nasl - Type : ACT_GATHER_INFO
2017-08-23Name : The remote SUSE host is missing one or more security updates.
File : suse_SU-2017-2237-1.nasl - Type : ACT_GATHER_INFO
2017-08-18Name : The remote openSUSE host is missing a security update.
File : openSUSE-2017-937.nasl - Type : ACT_GATHER_INFO
2017-07-24Name : The remote Fedora host is missing a security update.
File : fedora_2017-2afe501b36.nasl - Type : ACT_GATHER_INFO
2017-07-24Name : The remote Fedora host is missing a security update.
File : fedora_2017-5d6a9e0c9c.nasl - Type : ACT_GATHER_INFO
2017-07-17Name : The remote Samba server is affected by a service impersonation vulnerability.
File : samba_4_6_6.nasl - Type : ACT_GATHER_INFO
2017-07-17Name : The remote Ubuntu host is missing a security-related patch.
File : ubuntu_USN-3353-1.nasl - Type : ACT_GATHER_INFO
2017-07-17Name : The remote Ubuntu host is missing a security-related patch.
File : ubuntu_USN-3353-2.nasl - Type : ACT_GATHER_INFO
2017-07-17Name : The remote Slackware host is missing a security update.
File : Slackware_SSA_2017-195-02.nasl - Type : ACT_GATHER_INFO
2017-07-17Name : The remote Debian host is missing a security update.
File : debian_DLA-1027.nasl - Type : ACT_GATHER_INFO
2017-07-17Name : The remote Debian host is missing a security-related update.
File : debian_DSA-3909.nasl - Type : ACT_GATHER_INFO
2017-07-17Name : The remote Debian host is missing a security-related update.
File : debian_DSA-3912.nasl - Type : ACT_GATHER_INFO
2017-07-14Name : The remote FreeBSD host is missing one or more security-related updates.
File : freebsd_pkg_85851e4f67d911e7bc3700505689d4ae.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

SourceUrl
BID http://www.securityfocus.com/bid/99551
CONFIRM http://www.h5l.org/advisories.html?show=2017-07-11
https://github.com/heimdal/heimdal/releases/tag/heimdal-7.4.0
https://support.apple.com/HT208112
https://support.apple.com/HT208144
https://support.apple.com/HT208221
https://www.samba.org/samba/security/CVE-2017-11103.html
DEBIAN http://www.debian.org/security/2017/dsa-3912
FREEBSD https://www.freebsd.org/security/advisories/FreeBSD-SA-17:05.heimdal.asc
MISC https://www.orpheus-lyre.info/
SECTRACK http://www.securitytracker.com/id/1038876
http://www.securitytracker.com/id/1039427

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
DateInformations
2018-06-14 12:05:19
  • Multiple Updates
2017-11-14 09:23:12
  • Multiple Updates
2017-11-04 13:25:25
  • Multiple Updates
2017-11-04 09:23:48
  • Multiple Updates
2017-10-24 09:23:08
  • Multiple Updates
2017-10-04 13:25:04
  • Multiple Updates
2017-09-27 09:22:58
  • Multiple Updates
2017-09-22 13:24:45
  • Multiple Updates
2017-09-01 13:25:27
  • Multiple Updates
2017-08-24 13:25:06
  • Multiple Updates
2017-08-19 13:24:47
  • Multiple Updates
2017-07-25 13:24:40
  • Multiple Updates
2017-07-22 00:21:29
  • Multiple Updates
2017-07-18 13:24:51
  • Multiple Updates
2017-07-17 17:22:24
  • Multiple Updates
2017-07-15 13:25:44
  • Multiple Updates
2017-07-13 17:22:45
  • First insertion