CVE-2011-2522 (GCVE-0-2011-2522)
Vulnerability from cvelistv5
Published
2011-07-29 20:00
Modified
2024-08-06 23:00
Severity ?
CWE
  • n/a
Summary
Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that (1) shut down daemons, (2) start daemons, (3) add shares, (4) remove shares, (5) add printers, (6) remove printers, (7) add user accounts, or (8) remove user accounts, as demonstrated by certain start, stop, and restart parameters to the status program.
References
http://www.mandriva.com/security/advisories?name=MDVSA-2011:121 vendor-advisory, x_refsource_MANDRIVA
http://osvdb.org/74071 vdb-entry, x_refsource_OSVDB
http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c03008543 vendor-advisory, x_refsource_HP
http://marc.info/?l=bugtraq&m=133527864025056&w=2 vendor-advisory, x_refsource_HP
http://marc.info/?l=bugtraq&m=133527864025056&w=2 vendor-advisory, x_refsource_HP
http://securitytracker.com/id?1025852 vdb-entry, x_refsource_SECTRACK
https://bugzilla.samba.org/show_bug.cgi?id=8290 x_refsource_CONFIRM
http://www.debian.org/security/2011/dsa-2290 vendor-advisory, x_refsource_DEBIAN
http://www.samba.org/samba/security/CVE-2011-2522 x_refsource_CONFIRM
http://secunia.com/advisories/45393 third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/45496 third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/45488 third-party-advisory, x_refsource_SECUNIA
https://bugzilla.redhat.com/show_bug.cgi?id=721348 x_refsource_CONFIRM
http://samba.org/samba/history/samba-3.5.10.html x_refsource_CONFIRM
http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c03008543 vendor-advisory, x_refsource_HP
http://www.exploit-db.com/exploits/17577 exploit, x_refsource_EXPLOIT-DB
http://securityreason.com/securityalert/8317 third-party-advisory, x_refsource_SREASON
http://jvn.jp/en/jp/JVN29529126/index.html third-party-advisory, x_refsource_JVN
http://ubuntu.com/usn/usn-1182-1 vendor-advisory, x_refsource_UBUNTU
http://www.securityfocus.com/bid/48899 vdb-entry, x_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/68843 vdb-entry, x_refsource_XF
Impacted products
Vendor Product Version
n/a n/a Version: n/a
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T23:00:34.288Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "MDVSA-2011:121",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:121"
          },
          {
            "name": "74071",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/74071"
          },
          {
            "name": "HPSBNS02701",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c03008543"
          },
          {
            "name": "SSRT100664",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=133527864025056\u0026w=2"
          },
          {
            "name": "HPSBUX02768",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=133527864025056\u0026w=2"
          },
          {
            "name": "1025852",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1025852"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.samba.org/show_bug.cgi?id=8290"
          },
          {
            "name": "DSA-2290",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2011/dsa-2290"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.samba.org/samba/security/CVE-2011-2522"
          },
          {
            "name": "45393",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/45393"
          },
          {
            "name": "45496",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/45496"
          },
          {
            "name": "45488",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/45488"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=721348"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://samba.org/samba/history/samba-3.5.10.html"
          },
          {
            "name": "SSRT100598",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c03008543"
          },
          {
            "name": "17577",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "http://www.exploit-db.com/exploits/17577"
          },
          {
            "name": "8317",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/8317"
          },
          {
            "name": "JVN#29529126",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVN",
              "x_transferred"
            ],
            "url": "http://jvn.jp/en/jp/JVN29529126/index.html"
          },
          {
            "name": "USN-1182-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://ubuntu.com/usn/usn-1182-1"
          },
          {
            "name": "48899",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/48899"
          },
          {
            "name": "samba-swat-csrf(68843)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68843"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-07-26T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that (1) shut down daemons, (2) start daemons, (3) add shares, (4) remove shares, (5) add printers, (6) remove printers, (7) add user accounts, or (8) remove user accounts, as demonstrated by certain start, stop, and restart parameters to the status program."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-12T17:57:02",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "MDVSA-2011:121",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:121"
        },
        {
          "name": "74071",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/74071"
        },
        {
          "name": "HPSBNS02701",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c03008543"
        },
        {
          "name": "SSRT100664",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=133527864025056\u0026w=2"
        },
        {
          "name": "HPSBUX02768",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=133527864025056\u0026w=2"
        },
        {
          "name": "1025852",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1025852"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.samba.org/show_bug.cgi?id=8290"
        },
        {
          "name": "DSA-2290",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2011/dsa-2290"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.samba.org/samba/security/CVE-2011-2522"
        },
        {
          "name": "45393",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/45393"
        },
        {
          "name": "45496",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/45496"
        },
        {
          "name": "45488",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/45488"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=721348"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://samba.org/samba/history/samba-3.5.10.html"
        },
        {
          "name": "SSRT100598",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c03008543"
        },
        {
          "name": "17577",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "http://www.exploit-db.com/exploits/17577"
        },
        {
          "name": "8317",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/8317"
        },
        {
          "name": "JVN#29529126",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVN"
          ],
          "url": "http://jvn.jp/en/jp/JVN29529126/index.html"
        },
        {
          "name": "USN-1182-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://ubuntu.com/usn/usn-1182-1"
        },
        {
          "name": "48899",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/48899"
        },
        {
          "name": "samba-swat-csrf(68843)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68843"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2011-2522",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that (1) shut down daemons, (2) start daemons, (3) add shares, (4) remove shares, (5) add printers, (6) remove printers, (7) add user accounts, or (8) remove user accounts, as demonstrated by certain start, stop, and restart parameters to the status program."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "MDVSA-2011:121",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:121"
            },
            {
              "name": "74071",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/74071"
            },
            {
              "name": "HPSBNS02701",
              "refsource": "HP",
              "url": "http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c03008543"
            },
            {
              "name": "SSRT100664",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=133527864025056\u0026w=2"
            },
            {
              "name": "HPSBUX02768",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=133527864025056\u0026w=2"
            },
            {
              "name": "1025852",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1025852"
            },
            {
              "name": "https://bugzilla.samba.org/show_bug.cgi?id=8290",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.samba.org/show_bug.cgi?id=8290"
            },
            {
              "name": "DSA-2290",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2011/dsa-2290"
            },
            {
              "name": "http://www.samba.org/samba/security/CVE-2011-2522",
              "refsource": "CONFIRM",
              "url": "http://www.samba.org/samba/security/CVE-2011-2522"
            },
            {
              "name": "45393",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/45393"
            },
            {
              "name": "45496",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/45496"
            },
            {
              "name": "45488",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/45488"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=721348",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=721348"
            },
            {
              "name": "http://samba.org/samba/history/samba-3.5.10.html",
              "refsource": "CONFIRM",
              "url": "http://samba.org/samba/history/samba-3.5.10.html"
            },
            {
              "name": "SSRT100598",
              "refsource": "HP",
              "url": "http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c03008543"
            },
            {
              "name": "17577",
              "refsource": "EXPLOIT-DB",
              "url": "http://www.exploit-db.com/exploits/17577"
            },
            {
              "name": "8317",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/8317"
            },
            {
              "name": "JVN#29529126",
              "refsource": "JVN",
              "url": "http://jvn.jp/en/jp/JVN29529126/index.html"
            },
            {
              "name": "USN-1182-1",
              "refsource": "UBUNTU",
              "url": "http://ubuntu.com/usn/usn-1182-1"
            },
            {
              "name": "48899",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/48899"
            },
            {
              "name": "samba-swat-csrf(68843)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68843"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2011-2522",
    "datePublished": "2011-07-29T20:00:00",
    "dateReserved": "2011-06-15T00:00:00",
    "dateUpdated": "2024-08-06T23:00:34.288Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.