high8.8
CVE-2020-25721
Kerberos acceptors need easy access to stable AD identifiers (eg objectSid).
Impact
Kerberos acceptors need easy access to stable AD identifiers (eg objectSid). Samba as an AD DC now provides a way for Linux applications to obtain a reliable SID (and samAccountName) in issued tickets.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Samba | Samba | from 4.13.0 before 4.13.14 from 4.14.0 before 4.14.10 from 4.15.0 before 4.15.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://bugzilla.redhat.com/show_bug.cgi?id=2021728
- https://bugzilla.samba.org/show_bug.cgi?id=14725
- https://security.gentoo.org/glsa/202309-06
- https://www.samba.org/samba/security/CVE-2020-25721.html
- https://bugzilla.redhat.com/show_bug.cgi?id=2021728
- https://bugzilla.samba.org/show_bug.cgi?id=14725
- https://security.gentoo.org/glsa/202309-06
- https://www.samba.org/samba/security/CVE-2020-25721.html