SecuritySpace - CVE-2017-8495

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2017-8495

Description: Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to bypass Extended Protection for Authentication when Kerberos fails to prevent tampering with the SNAME field during ticket exchange, aka "Kerberos SNAME Security Feature Bypass Vulnerability" or Orpheus' Lyre.

Test IDs: 1.3.6.1.4.1.25623.1.0.811510

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2017-8495
BugTraq ID: 99424
http://www.securityfocus.com/bid/99424
https://www.orpheus-lyre.info/
http://www.securitytracker.com/id/1038862

CVE ID:	CVE-2017-8495
Description:	Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to bypass Extended Protection for Authentication when Kerberos fails to prevent tampering with the SNAME field during ticket exchange, aka "Kerberos SNAME Security Feature Bypass Vulnerability" or Orpheus' Lyre.
Test IDs:	1.3.6.1.4.1.25623.1.0.811510
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2017-8495 BugTraq ID: 99424 http://www.securityfocus.com/bid/99424 https://www.orpheus-lyre.info/ http://www.securitytracker.com/id/1038862