DSA-3909-1 samba -- sambaID: oval:org.secpod.oval:def:53096 | Date: (C)2019-04-04 (M)2024-01-29 |
Class: PATCH | Family: unix |
Jeffrey Altman, Viktor Duchovni and Nico Williams identified a mutual authentication bypass vulnerability in samba, the SMB/CIFS file, print, and login server. Also known as Orpheus" Lyre, this vulnerability is located in Samba Kerberos Key Distribution Center component and could be used by an attacker on the network path to impersonate a server. More details can be found on the vulnerability website and on the Samba project website