CVE-2011-2522
NoneCVSS
—
EPSS
10.6%
Published
Jul 29, 2011
CISA due date
—
The record
Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that (1) shut down daemons, (2) start daemons, (3) add shares, (4) remove shares, (5) add printers, (6) remove printers, (7) add user accounts, or (8) remove user accounts, as demonstrated by certain start, stop, and restart parameters to the status program.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | samba | 0 | 2:3.5.10~dfsg-1 |
| Debian:11 | samba | 0 | 2:3.5.10~dfsg-1 |
| Debian:12 | samba | 0 | 2:3.5.10~dfsg-1 |
| Debian:13 | samba | 0 | 2:3.5.10~dfsg-1 |
| Debian:5.0 | samba | 0 | 2:3.2.5-4lenny15 |
| Debian:6.0 | samba | 0 | 2:3.5.6~dfsg-3squeeze5 |
| Red Hat:enterprise_linux:4::as | samba | 0 | 0:3.0.33-0.34.el4 |
| Red Hat:enterprise_linux:4::as | samba-client | 0 | 0:3.0.33-0.34.el4 |
| Red Hat:enterprise_linux:4::as | samba-common | 0 | 0:3.0.33-0.34.el4 |
| Red Hat:enterprise_linux:4::as | samba-debuginfo | 0 | 0:3.0.33-0.34.el4 |
| Red Hat:enterprise_linux:4::as | samba-swat | 0 | 0:3.0.33-0.34.el4 |
| Red Hat:enterprise_linux:4::desktop | samba | 0 | 0:3.0.33-0.34.el4 |
| Red Hat:enterprise_linux:4::desktop | samba-client | 0 | 0:3.0.33-0.34.el4 |
| Red Hat:enterprise_linux:4::desktop | samba-common | 0 | 0:3.0.33-0.34.el4 |
| Red Hat:enterprise_linux:4::desktop | samba-debuginfo | 0 | 0:3.0.33-0.34.el4 |
| Red Hat:enterprise_linux:4::desktop | samba-swat | 0 | 0:3.0.33-0.34.el4 |
| Red Hat:enterprise_linux:4::es | samba | 0 | 0:3.0.33-0.34.el4 |
| Red Hat:enterprise_linux:4::es | samba-client | 0 | 0:3.0.33-0.34.el4 |
| Red Hat:enterprise_linux:4::es | samba-common | 0 | 0:3.0.33-0.34.el4 |
| Red Hat:enterprise_linux:4::es | samba-debuginfo | 0 | 0:3.0.33-0.34.el4 |
| Red Hat:enterprise_linux:4::es | samba-swat | 0 | 0:3.0.33-0.34.el4 |
| Red Hat:enterprise_linux:4::ws | samba | 0 | 0:3.0.33-0.34.el4 |
| Red Hat:enterprise_linux:4::ws | samba-client | 0 | 0:3.0.33-0.34.el4 |
| Red Hat:enterprise_linux:4::ws | samba-common | 0 | 0:3.0.33-0.34.el4 |
| Red Hat:enterprise_linux:4::ws | samba-debuginfo | 0 | 0:3.0.33-0.34.el4 |
| Red Hat:enterprise_linux:4::ws | samba-swat | 0 | 0:3.0.33-0.34.el4 |
| Red Hat:enterprise_linux:5::client | libsmbclient | 0 | 0:3.0.33-3.29.el5_7.4 |
| Red Hat:enterprise_linux:5::client | libsmbclient-devel | 0 | 0:3.0.33-3.29.el5_7.4 |
| Red Hat:enterprise_linux:5::client | samba | 0 | 0:3.0.33-3.29.el5_7.4 |
| Red Hat:enterprise_linux:5::client | samba-client | 0 | 0:3.0.33-3.29.el5_7.4 |
| Red Hat:enterprise_linux:5::client | samba-common | 0 | 0:3.0.33-3.29.el5_7.4 |
| Red Hat:enterprise_linux:5::client | samba-debuginfo | 0 | 0:3.0.33-3.29.el5_7.4 |
| Red Hat:enterprise_linux:5::client | samba-swat | 0 | 0:3.0.33-3.29.el5_7.4 |
| Red Hat:enterprise_linux:5::client | samba3x | 0 | 0:3.5.4-0.83.el5_7.2 |
| Red Hat:enterprise_linux:5::client | samba3x-client | 0 | 0:3.5.4-0.83.el5_7.2 |
| Red Hat:enterprise_linux:5::client | samba3x-common | 0 | 0:3.5.4-0.83.el5_7.2 |
| Red Hat:enterprise_linux:5::client | samba3x-debuginfo | 0 | 0:3.5.4-0.83.el5_7.2 |
| Red Hat:enterprise_linux:5::client | samba3x-doc | 0 | 0:3.5.4-0.83.el5_7.2 |
| Red Hat:enterprise_linux:5::client | samba3x-domainjoin-gui | 0 | 0:3.5.4-0.83.el5_7.2 |
| Red Hat:enterprise_linux:5::client | samba3x-swat | 0 | 0:3.5.4-0.83.el5_7.2 |
| Red Hat:enterprise_linux:5::client | samba3x-winbind | 0 | 0:3.5.4-0.83.el5_7.2 |
| Red Hat:enterprise_linux:5::client | samba3x-winbind-devel | 0 | 0:3.5.4-0.83.el5_7.2 |
| Red Hat:enterprise_linux:5::client_workstation | libsmbclient | 0 | 0:3.0.33-3.29.el5_7.4 |
| Red Hat:enterprise_linux:5::client_workstation | libsmbclient-devel | 0 | 0:3.0.33-3.29.el5_7.4 |
| Red Hat:enterprise_linux:5::client_workstation | samba | 0 | 0:3.0.33-3.29.el5_7.4 |
| Red Hat:enterprise_linux:5::client_workstation | samba-client | 0 | 0:3.0.33-3.29.el5_7.4 |
| Red Hat:enterprise_linux:5::client_workstation | samba-common | 0 | 0:3.0.33-3.29.el5_7.4 |
| Red Hat:enterprise_linux:5::client_workstation | samba-debuginfo | 0 | 0:3.0.33-3.29.el5_7.4 |
| Red Hat:enterprise_linux:5::client_workstation | samba-swat | 0 | 0:3.0.33-3.29.el5_7.4 |
| Red Hat:enterprise_linux:5::client_workstation | samba3x | 0 | 0:3.5.4-0.83.el5_7.2 |
| Red Hat:enterprise_linux:5::client_workstation | samba3x-client | 0 | 0:3.5.4-0.83.el5_7.2 |
| Red Hat:enterprise_linux:5::client_workstation | samba3x-common | 0 | 0:3.5.4-0.83.el5_7.2 |
| Red Hat:enterprise_linux:5::client_workstation | samba3x-debuginfo | 0 | 0:3.5.4-0.83.el5_7.2 |
| Red Hat:enterprise_linux:5::client_workstation | samba3x-doc | 0 | 0:3.5.4-0.83.el5_7.2 |
| Red Hat:enterprise_linux:5::client_workstation | samba3x-domainjoin-gui | 0 | 0:3.5.4-0.83.el5_7.2 |
| Red Hat:enterprise_linux:5::client_workstation | samba3x-swat | 0 | 0:3.5.4-0.83.el5_7.2 |
| Red Hat:enterprise_linux:5::client_workstation | samba3x-winbind | 0 | 0:3.5.4-0.83.el5_7.2 |
| Red Hat:enterprise_linux:5::client_workstation | samba3x-winbind-devel | 0 | 0:3.5.4-0.83.el5_7.2 |
| Red Hat:enterprise_linux:5::server | libsmbclient | 0 | 0:3.0.33-3.29.el5_7.4 |
| Red Hat:enterprise_linux:5::server | libsmbclient-devel | 0 | 0:3.0.33-3.29.el5_7.4 |
| Red Hat:enterprise_linux:5::server | samba | 0 | 0:3.0.33-3.29.el5_7.4 |
| Red Hat:enterprise_linux:5::server | samba-client | 0 | 0:3.0.33-3.29.el5_7.4 |
| Red Hat:enterprise_linux:5::server | samba-common | 0 | 0:3.0.33-3.29.el5_7.4 |
| Red Hat:enterprise_linux:5::server | samba-debuginfo | 0 | 0:3.0.33-3.29.el5_7.4 |
| Red Hat:enterprise_linux:5::server | samba-swat | 0 | 0:3.0.33-3.29.el5_7.4 |
| Red Hat:enterprise_linux:5::server | samba3x | 0 | 0:3.5.4-0.83.el5_7.2 |
| Red Hat:enterprise_linux:5::server | samba3x-client | 0 | 0:3.5.4-0.83.el5_7.2 |
| Red Hat:enterprise_linux:5::server | samba3x-common | 0 | 0:3.5.4-0.83.el5_7.2 |
| Red Hat:enterprise_linux:5::server | samba3x-debuginfo | 0 | 0:3.5.4-0.83.el5_7.2 |
| Red Hat:enterprise_linux:5::server | samba3x-doc | 0 | 0:3.5.4-0.83.el5_7.2 |
| Red Hat:enterprise_linux:5::server | samba3x-domainjoin-gui | 0 | 0:3.5.4-0.83.el5_7.2 |
| Red Hat:enterprise_linux:5::server | samba3x-swat | 0 | 0:3.5.4-0.83.el5_7.2 |
| Red Hat:enterprise_linux:5::server | samba3x-winbind | 0 | 0:3.5.4-0.83.el5_7.2 |
| Red Hat:enterprise_linux:5::server | samba3x-winbind-devel | 0 | 0:3.5.4-0.83.el5_7.2 |
| Red Hat:enterprise_linux:6::server | cifs-utils | 0 | 0:4.8.1-2.el6_1.2 |
| Red Hat:enterprise_linux:6::server | cifs-utils-debuginfo | 0 | 0:4.8.1-2.el6_1.2 |
| Red Hat:enterprise_linux:6::server | libsmbclient | 0 | 0:3.5.6-86.el6_1.4 |
| Red Hat:enterprise_linux:6::server | libsmbclient-devel | 0 | 0:3.5.6-86.el6_1.4 |
| Red Hat:enterprise_linux:6::server | samba | 0 | 0:3.5.6-86.el6_1.4 |
| Red Hat:enterprise_linux:6::server | samba-client | 0 | 0:3.5.6-86.el6_1.4 |
| Red Hat:enterprise_linux:6::server | samba-common | 0 | 0:3.5.6-86.el6_1.4 |
| Red Hat:enterprise_linux:6::server | samba-debuginfo | 0 | 0:3.5.6-86.el6_1.4 |
| Red Hat:enterprise_linux:6::server | samba-doc | 0 | 0:3.5.6-86.el6_1.4 |
| Red Hat:enterprise_linux:6::server | samba-domainjoin-gui | 0 | 0:3.5.6-86.el6_1.4 |
| Red Hat:enterprise_linux:6::server | samba-swat | 0 | 0:3.5.6-86.el6_1.4 |
| Red Hat:enterprise_linux:6::server | samba-winbind | 0 | 0:3.5.6-86.el6_1.4 |
| Red Hat:enterprise_linux:6::server | samba-winbind-clients | 0 | 0:3.5.6-86.el6_1.4 |
| Red Hat:enterprise_linux:6::server | samba-winbind-devel | 0 | 0:3.5.6-86.el6_1.4 |
| Red Hat:enterprise_linux:6::server | samba-winbind-krb5-locator | 0 | 0:3.5.6-86.el6_1.4 |
| openSUSE:Tumbleweed | samba | 0 | 4.5.0-1.1 |
Related vulnerabilities
- CVE-2014-0178 Samba 3.6.6 through 3.6.23, 4.0.x before 4.0.18, and 4.1.x before 4.1.8, when a certain… Also affects samba
- CVE-2013-4124 Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x… Also affects samba
- CVE-2010-2063 Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in… Also affects samba
- CVE-2010-0926 The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x… Also affects samba
- CVE-2008-1105 Heap-based buffer overflow in the receive_smb_raw function in util/sock.c in Samba 3.0.0… Also affects samba
- CVE-2007-6015 Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through… Also affects samba
- CVE-2007-5398 Stack-based buffer overflow in the reply_netbios_packet function in nmbd/nmbd_packets.c… Also affects samba
- CVE-2007-2446 Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through… Also affects samba