CVEvulnerability
CVE-2011-2694
2.6 LOW
Official page ↗
- Status
- Modified
- Published
- 2011-07-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.6 LOW — AV:N/AC:H/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the username parameter to the passwd program (aka the user field to the Change Password page).
Affected configurations
• samba samba (>= 3.0.0 < 3.3.16)
• samba samba (>= 3.4.0 < 3.4.14)
• samba samba (>= 3.5.0 < 3.5.10)
• canonical ubuntu linux 8.04
• canonical ubuntu linux 10.04
• canonical ubuntu linux 10.10
• canonical ubuntu linux 11.04
• debian debian linux 5.0
• debian debian linux 6.0
• debian debian linux 7.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://jvn.jp/en/jp/JVN63041502/index.html Third Party Advisory
- http://osvdb.org/74072 Broken Link
- http://samba.org/samba/history/samba-3.5.10.html Vendor Advisory
- http://secunia.com/advisories/45393 Not Applicable, Vendor Advisory
- http://secunia.com/advisories/45488 Not Applicable, Third Party Advisory
- http://secunia.com/advisories/45496 Not Applicable, Third Party Advisory
- http://securitytracker.com/id?1025852 Broken Link, Third Party Advisory, VDB Entry
- http://ubuntu.com/usn/usn-1182-1 Third Party Advisory
- http://www.debian.org/security/2011/dsa-2290 Third Party Advisory
- http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c03008543 Broken Link, Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:121 Broken Link
- http://www.samba.org/samba/security/CVE-2011-2694 Vendor Advisory
- http://www.securityfocus.com/bid/48901 Third Party Advisory, VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=722537 Issue Tracking, Patch
- https://bugzilla.samba.org/show_bug.cgi?id=8289 Issue Tracking, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/68844 Third Party Advisory, VDB Entry
- http://jvn.jp/en/jp/JVN63041502/index.html Third Party Advisory
- http://osvdb.org/74072 Broken Link
- http://samba.org/samba/history/samba-3.5.10.html Vendor Advisory
- http://secunia.com/advisories/45393 Not Applicable, Vendor Advisory
- http://secunia.com/advisories/45488 Not Applicable, Third Party Advisory
- http://secunia.com/advisories/45496 Not Applicable, Third Party Advisory
- http://securitytracker.com/id?1025852 Broken Link, Third Party Advisory, VDB Entry
- http://ubuntu.com/usn/usn-1182-1 Third Party Advisory
- http://www.debian.org/security/2011/dsa-2290 Third Party Advisory
- http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c03008543 Broken Link, Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:121 Broken Link
- http://www.samba.org/samba/security/CVE-2011-2694 Vendor Advisory
- http://www.securityfocus.com/bid/48901 Third Party Advisory, VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=722537 Issue Tracking, Patch
- https://bugzilla.samba.org/show_bug.cgi?id=8289 Issue Tracking, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/68844 Third Party Advisory, VDB Entry