CVE-2011-2522
MEDIUM severity · CVSS 6.8 · Cross-site request forgery (CSRF)
6.8CVSS MEDIUM
Summary
Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that (1) shut down daemons, (2) start daemons, (3) add shares, (4) remove shares, (5) add printers, (6) remove printers, (7) add user accounts, or (8) remove user accounts, as demonstrated by certain start, stop, and restart parameters to the status program.
Impact & exploitability
Attack vectorNetwork
Attack complexity—
Privileges required—
User interaction—
Confidentiality impact—
Integrity impact—
Availability impact—
Exploit probability (EPSS)10%
AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected products we track (1)
Recommendation
Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.
Additional information
- NVD record
- http://samba.org/samba/history/samba-3.5.10.htmlAdvisory
- http://jvn.jp/en/jp/JVN29529126/index.htmlAdvisory
- http://marc.info/?l=bugtraq&m=133527864025056&w=2Advisory
- http://osvdb.org/74071
- http://secunia.com/advisories/45393Advisory
- http://secunia.com/advisories/45488Advisory
- http://secunia.com/advisories/45496Advisory
- http://securityreason.com/securityalert/8317Advisory