CVE-2016-2125

Name of the Vulnerable Software and Affected Versions Samba versions prior to 4.5.3 Samba versions prior to 4.4.8 Samba versions prior to 4.3.13

Description The issue allows attackers to impersonate the authenticated user or service using a forwardable Kerberos "Ticket Granting Ticket" (TGT) when Samba uses Kerberos authentication. This occurs because Samba always requested forwardable tickets. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users.

Recommendations For versions prior to 4.5.3, update to version 4.5.3 or later. For versions prior to 4.4.8, update to version 4.4.8 or later. For versions prior to 4.3.13, update to version 4.3.13 or later.