Heimdal, as used in Apple OS X before 10.11, allows remote attackers to conduct replay attacks against the SMB server via packet data that represents a Kerberos authenticated request.
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
Link | Tags |
---|---|
http://www.securitytracker.com/id/1033703 | vdb entry |
http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html | vendor advisory |
https://support.apple.com/HT205267 | vendor advisory |