CVE ID:	CVE-2018-16860
Description:	A flaw was found in samba's Heimdal KDC implementation, versions 4.8.x up to, excluding 4.8.12, 4.9.x up to, excluding 4.9.8 and 4.10.x up to, excluding 4.10.3, when used in AD DC mode. A man in the middle attacker could use this flaw to intercept the request to the KDC and replace the user name (principal) in the request with any desired user name (principal) that exists in the KDC effectively obtaining a ticket for that principal.
Test IDs:	1.3.6.1.4.1.25623.1.1.12.2019.3976.2   1.3.6.1.4.1.25623.1.1.2.2020.1616   1.3.6.1.4.1.25623.1.0.891788   1.3.6.1.4.1.25623.1.0.704455   1.3.6.1.4.1.25623.1.0.704443   1.3.6.1.4.1.25623.1.0.108575   1.3.6.1.4.1.25623.1.0.876367   1.3.6.1.4.1.25623.1.0.844005
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2018-16860 Bugtraq: 20190814 APPLE-SA-2019-8-13-1 Additional information for APPLE-SA-2019-7-22-2 macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra (Google Search) https://seclists.org/bugtraq/2019/Aug/21 Bugtraq: 20190814 APPLE-SA-2019-8-13-2 Additional information for APPLE-SA-2019-7-22-1 iOS 12.4 (Google Search) https://seclists.org/bugtraq/2019/Aug/25 Bugtraq: 20190814 APPLE-SA-2019-8-13-3 Additional information for APPLE-SA-2019-7-22-4 watchOS 5.3 (Google Search) https://seclists.org/bugtraq/2019/Aug/22 Bugtraq: 20190814 APPLE-SA-2019-8-13-4 Additional information for APPLE-SA-2019-7-22-5 tvOS 12.4 (Google Search) https://seclists.org/bugtraq/2019/Aug/23 http://seclists.org/fulldisclosure/2019/Aug/11 http://seclists.org/fulldisclosure/2019/Aug/13 http://seclists.org/fulldisclosure/2019/Aug/14 http://seclists.org/fulldisclosure/2019/Aug/15 https://security.gentoo.org/glsa/202003-52 https://www.samba.org/samba/security/CVE-2018-16860.html SuSE Security Announcement: openSUSE-SU-2019:1888 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00026.html