Unscored severity · published Jul 29, 2011
CVE-2011-2522
Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allow remote attackers to hijack the…
–
CVSS
10.6%
EPSS
No
On KEV
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that (1) shut down daemons, (2) start daemons, (3) add shares, (4) remove shares, (5) add printers, (6) remove printers, (7) add user accounts, or (8) remove user accounts, as demonstrated by certain start, stop, and restart parameters to the status program.
Exploitation
Is it being used?
Exploit prediction (EPSS)10.6% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DL
Debian Linux · Debian
5.0; 6.0; 7.0 · source: NVD
SA
Samba · Samba
3.0.0 before 3.3.16; 3.4.0 before 3.4.14; 3.5.0 before 3.5.10 · source: NVD
UL
Ubuntu Linux · Canonical
8.04; 10.04; 10.10; 11.04 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-2522
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-2522
Third Party Advisory
http://jvn.jp/en/jp/JVN29529126/index.html
Mailing List
http://marc.info/?l=bugtraq&m=133527864025056&w=2
Broken Link
http://osvdb.org/74071
Vendor Advisory
http://samba.org/samba/history/samba-3.5.10.html
Third Party Advisory
http://secunia.com/advisories/45393
Third Party Advisory
http://secunia.com/advisories/45488
More from Ubuntu Linux
9.8
CVE-2020-11651
SaltStack Salt Authentication Bypass Vulnerability
9.8
CVE-2020-7247
OpenSMTPD Remote Code Execution Vulnerability
9.8
CVE-2019-11043
Underflow in PHP-FPM can lead to RCE
9.8
CVE-2019-16928
Exim Out-of-bounds Write Vulnerability
9.8
CVE-2019-10149
Exim Mail Transfer Agent (MTA) Improper Input Validation