CVE-2017-11103
Summary
| CVE | CVE-2017-11103 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2017-07-13 13:29:00 UTC |
|---|
| Updated | 2020-08-18 15:05:00 UTC |
|---|
| Description | Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In _krb5_extract_ticket() the KDC-REP service name must be obtained from the encrypted version stored in 'enc_part' instead of the unencrypted version stored in 'ticket'. Use of the unencrypted version provides an opportunity for successful server impersonation and other attacks. NOTE: this CVE is only for Heimdal and other products that embed Heimdal code; it does not apply to other instances in which this part of the Kerberos 5 protocol specification is violated. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| Samba - Security Announcement Archive |
CONFIRM |
www.samba.org |
Third Party Advisory |
| About the security content of macOS High Sierra 10.13 - Apple Support |
CONFIRM |
support.apple.com |
Third Party Advisory |
| About the security content of macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, and Security Update 2017-004 El Capitan - Apple Support |
CONFIRM |
support.apple.com |
Third Party Advisory |
| FreeBSD-SA-17:05 |
FREEBSD |
www.freebsd.org |
Third Party Advisory |
| About the security content of iOS 11 - Apple Support |
CONFIRM |
support.apple.com |
Third Party Advisory |
| FreeBSD Heimdal Programming Error Lets Remote Users Bypass Kerberos Authentication in Certain Cases - SecurityTracker |
SECTRACK |
www.securitytracker.com |
Third Party Advisory, VDB Entry |
| Debian -- Security Information -- DSA-3912-1 heimdal |
DEBIAN |
www.debian.org |
Third Party Advisory |
| Orpheus' Lyre |
MISC |
www.orpheus-lyre.info |
Third Party Advisory |
| Apple macOS/OS X Multiple Flaws Let Remote and Local Users Bypass Security and Deny Service, Local Users Obtain Potentially Sensitive Information, and Applications Gain Elevated Privileges - SecurityTracker |
SECTRACK |
www.securitytracker.com |
Third Party Advisory, VDB Entry |
| Heimdal security advisories |
CONFIRM |
www.h5l.org |
Broken Link |
| Release Heimdal 7.4 · heimdal/heimdal · GitHub |
CONFIRM |
github.com |
Release Notes |
| Heimdal CVE-2017-11103 Man in the Middle Security Bypass Vulnerability |
BID |
www.securityfocus.com |
Third Party Advisory, VDB Entry |
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 500243 Alpine Linux Security Update for heimdal
- 503991 Alpine Linux Security Update for heimdal
