[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f4Wz49HpOHIQpW5lpPWm_8Xd_ub9wJGEEIbK3o08MCU4":3,"g5a-risk:CVE-2017-11103":240},{"success":4,"data":5,"meta":238},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":25,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":72,"references":73,"referencesCount":147,"weaknesses":148,"weaknessesCount":157,"isActivelyExploited":158,"cisaInfo":25,"otxData":25,"relatedBlogPosts":159,"seoMetadata":160,"configurations":185,"relatedVendorCves":236,"notableEvents":237},"CVE-2017-11103","What is CVE-2017-11103?","Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In _krb5_extract_ticket() the KDC-REP service name must be obtained from the encrypted version stored in 'enc_part' instead of the unencrypted version stored in 'ticket'. Use of the unencrypted version provides an opportunity for successful server impersonation and other attacks. NOTE: this CVE is only for Heimdal and other products that embed Heimdal code; it does not apply to other instances in which this part of the Kerberos 5 protocol specification is violated.","Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violat...","2017-07-13T13:29:00.173","2025-04-20T01:37:25.86",8.1,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":25,"CVSSMetricV2":28,"CVSSMetricV40":25},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":22,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","HIGH","NONE","UNCHANGED",null,2.2,5.9,[29],{"Source":17,"Type":18,"CVSSData":30,"BaseSeverity":33,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":25,"ObtainAllPrivilege":25,"ObtainUserPrivilege":25,"ObtainOtherPrivilege":25,"UserInteractionRequired":25},{"Version":31,"VectorString":32,"AccessVector":21,"AccessComplexity":33,"Authentication":23,"ConfidentialityImpact":34,"IntegrityImpact":34,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":25,"Exploitability":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"CollateralDamagePotential":25,"TargetDistribution":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"EnvironmentalScore":25},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","MEDIUM","PARTIAL",6.8,8.6,6.4,0.05118,[38,38,38,38,38,38,38],"High",[42,47,51,54,58,61,66,69],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"heimdal_project","heimdal","*","cpe:2.3:a:heimdal_project:heimdal:*:*:*:*:*:*:*:*",{"vendor":48,"product":48,"version":49,"criteria":50,"vulnerable":4},"freebsd","-","cpe:2.3:o:freebsd:freebsd:-:*:*:*:*:*:*:*",{"vendor":52,"product":52,"version":45,"criteria":53,"vulnerable":4},"samba","cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",{"vendor":55,"product":56,"version":45,"criteria":57,"vulnerable":4},"apple","iphone_os","cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",{"vendor":55,"product":59,"version":45,"criteria":60,"vulnerable":4},"mac_os_x","cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",{"vendor":62,"product":63,"version":64,"criteria":65,"vulnerable":4},"debian","debian_linux","8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":62,"product":63,"version":67,"criteria":68,"vulnerable":4},"9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",{"vendor":62,"product":63,"version":70,"criteria":71,"vulnerable":4},"10.0","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",8,[74,79,84,89,93,96,101,105,108,111,115,119,123,125,127,129,131,133,135,137,139,141,143,145],{"url":75,"source":76,"tags":77},"http:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2017\u002Fdsa-3912","Debian",[78],"Third Party Advisory",{"url":80,"source":81,"tags":82},"http:\u002F\u002Fwww.h5l.org\u002Fadvisories.html?show=2017-07-11","H5l",[83],"Broken Link",{"url":85,"source":86,"tags":87},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F99551","Securityfocus",[78,88],"VDB Entry",{"url":90,"source":91,"tags":92},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1038876","Securitytracker",[78,88],{"url":94,"source":91,"tags":95},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1039427",[78,88],{"url":97,"source":98,"tags":99},"https:\u002F\u002Fgithub.com\u002Fheimdal\u002Fheimdal\u002Freleases\u002Ftag\u002Fheimdal-7.4.0","GitHub",[100],"Release Notes",{"url":102,"source":103,"tags":104},"https:\u002F\u002Fsupport.apple.com\u002FHT208112","Apple",[78],{"url":106,"source":103,"tags":107},"https:\u002F\u002Fsupport.apple.com\u002FHT208144",[78],{"url":109,"source":103,"tags":110},"https:\u002F\u002Fsupport.apple.com\u002FHT208221",[78],{"url":112,"source":113,"tags":114},"https:\u002F\u002Fwww.freebsd.org\u002Fsecurity\u002Fadvisories\u002FFreeBSD-SA-17:05.heimdal.asc","Freebsd",[78],{"url":116,"source":117,"tags":118},"https:\u002F\u002Fwww.orpheus-lyre.info\u002F","Orpheus-lyre",[78],{"url":120,"source":121,"tags":122},"https:\u002F\u002Fwww.samba.org\u002Fsamba\u002Fsecurity\u002FCVE-2017-11103.html","Samba",[78],{"url":75,"source":76,"tags":124},[78],{"url":80,"source":81,"tags":126},[83],{"url":85,"source":86,"tags":128},[78,88],{"url":90,"source":91,"tags":130},[78,88],{"url":94,"source":91,"tags":132},[78,88],{"url":97,"source":98,"tags":134},[100],{"url":102,"source":103,"tags":136},[78],{"url":106,"source":103,"tags":138},[78],{"url":109,"source":103,"tags":140},[78],{"url":112,"source":113,"tags":142},[78],{"url":116,"source":117,"tags":144},[78],{"url":120,"source":121,"tags":146},[78],24,[149],{"id":150,"name":151,"description":152,"extendedDescription":153,"status":154,"abstraction":155,"structure":156},"CWE-345","Insufficient Verification of Data Authenticity","The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.","","Draft","Class","Simple",1,false,[],{"title":161,"metaDescription":162,"keywords":163,"canonicalUrl":164,"structuredData":165},"What is CVE-2017-11103? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2017-11103, a high severity cyber security vulnerability from 2017. Heimdal before 7.4 allows remote attackers to impersonate s...","CVE-2017-11103, CVE-2017-11103 vulnerability, CVE-2017-11103 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, heimdal_project security, freebsd security, samba security, apple security, debian security, heimdal vulnerability, freebsd vulnerability, samba vulnerability","\u002Fwhat-is\u002Fcve-2017-11103",{"@context":166,"@type":167,"headline":161,"description":162,"datePublished":10,"dateModified":11,"author":168,"publisher":172,"about":176,"mainEntityOfPage":180,"articleSection":183,"keywords":184},"https:\u002F\u002Fschema.org","TechArticle",{"@type":169,"name":170,"url":171},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":169,"name":170,"url":171,"logo":173},{"@type":174,"url":175},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":177,"name":6,"description":178,"additionalType":179},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":181,"@id":182},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2017-11103","Cybersecurity","CVE-2017-11103, CVE-2017-11103 vulnerability, CVE-2017-11103 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[186,194,200,216,226],{"Operator":25,"Negate":25,"Nodes":187},[188],{"Operator":189,"Negate":25,"CPEMatch":190},"OR",[191],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":192,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":193,"VersionEndIncluding":25},"BBB557FB-2D64-4B67-ABB4-232B8532E9F7","7.4.0",{"Operator":25,"Negate":25,"Nodes":195},[196],{"Operator":189,"Negate":25,"CPEMatch":197},[198],{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":199,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"3B2AEFCC-A2F6-45A6-A2EF-24F7906E44E2",{"Operator":25,"Negate":25,"Nodes":201},[202],{"Operator":189,"Negate":25,"CPEMatch":203},[204,208,212],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":205,"VersionStartExcluding":25,"VersionStartIncluding":206,"VersionEndExcluding":207,"VersionEndIncluding":25},"F4D6C6EB-04EC-4514-947F-37DA23C07BD1","4.0.0","4.4.15",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":209,"VersionStartExcluding":25,"VersionStartIncluding":210,"VersionEndExcluding":211,"VersionEndIncluding":25},"C93F9D32-8BFD-484B-8D16-6A440132A4E3","4.5.0","4.5.12",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":213,"VersionStartExcluding":25,"VersionStartIncluding":214,"VersionEndExcluding":215,"VersionEndIncluding":25},"92EBC874-FF91-47E4-B57D-A54DF0859239","4.6.0","4.6.6",{"Operator":25,"Negate":25,"Nodes":217},[218],{"Operator":189,"Negate":25,"CPEMatch":219},[220,223],{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":221,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":222,"VersionEndIncluding":25},"17CE3EBB-FF76-4158-81FE-63AECECA988E","11.0",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":224,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":225,"VersionEndIncluding":25},"C43CA59D-847F-4225-A7A6-02DEB1BB4F64","10.13.1",{"Operator":25,"Negate":25,"Nodes":227},[228],{"Operator":189,"Negate":25,"CPEMatch":229},[230,232,234],{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":231,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Vulnerable":4,"Criteria":68,"MatchCriteriaID":233,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"DEECE5FC-CACF-4496-A3E7-164736409252",{"Vulnerable":4,"Criteria":71,"MatchCriteriaID":235,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",[],[],{"lastModified":11,"cacheTime":239,"version":31},1792354977664,{"score":241,"band":242,"action":243,"scoredAt":244},49,"Medium","Plan remediation","2026-10-17T09:06:11.03751+00:00"]