CVE-2018-16860

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A flaw was found in samba's Heimdal KDC implementation, versions 4.8.x up to, excluding 4.8.12, 4.9.x up to, excluding 4.9.8 and 4.10.x up to, excluding 4.10.3, when used in AD DC mode. A man in the middle attacker could use this flaw to intercept the request to the KDC and replace the user name (principal) in the request with any desired user name (principal) that exists in the KDC effectively obtaining a ticket for that principal.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-358

Affected software

No affected versions have been published.

Timeline

Published: Jul 31, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-168614.8A cross-site scripting (XSS) flaw was found in the foreman component of satellite. An attacker with privilege to create entries using the Ho CVE-2018-168625.5A security flaw was found in the Linux kernel in a way that the cleancache subsystem clears an inode after the final file truncation (remova CVE-2018-168637.8It was found that RHSA-2018:2918 did not fully fix CVE-2018-16509. An attacker could possibly exploit another variant of the flaw and bypass CVE-2018-168647.8An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journa CVE-2018-168657.8An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journa CVE-2018-168663.3An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'. A local attacker CVE-2018-168677.8A flaw was found in qemu Media Transfer Protocol (MTP) before version 3.1.0. A path traversal in the in usb_mtp_write_data function in hw/us CVE-2018-168685.6A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls handles verification of RSA decrypted PKCS#1 v1.5 CVE-2018-168695.7A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypted PKCS#1 CVE-2018-168705.9It was found that wolfssl before 3.15.7 is vulnerable to a new variant of the Bleichenbacher attack to perform downgrade attacks against TLS CVE-2018-168717.5A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacker, who is able to mou CVE-2018-168725.3A flaw was found in qemu Media Transfer Protocol (MTP). The code opening files in usb_mtp_get_object and usb_mtp_get_partial_object and dire