CVE-2011-2522

MEDIUM 6.8CVE-2011-2522 · Published 29/07/2011 · updated 16/06/2026

Package	Affected versions	Patched versions
samba samba	`≥ 3.0.0, < 3.3.16≥ 3.4.0, < 3.4.14≥ 3.5.0, < 3.5.10`	`3.3.163.4.143.5.10`

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that (1) shut down daemons, (2) start daemons, (3) add shares, (4) remove shares, (5) add printers, (6) remove printers, (7) add user accounts, or (8) remove user accounts, as demonstrated by certain start, stop, and restart parameters to the status program.

References

jvn.jp/en/jp/JVN29529126/index.html · Third Party Advisory
marc.info · Mailing List
osvdb.org/74071 · Broken Link
samba.org/samba/history/samba-3.5.10.html · Vendor Advisory
secunia.com/advisories/45393 · Third Party Advisory
secunia.com/advisories/45488 · Third Party Advisory
secunia.com/advisories/45496 · Third Party Advisory
securityreason.com/securityalert/8317 · Third Party Advisory
securitytracker.com/id · Third Party Advisory
ubuntu.com/usn/usn-1182-1 · Third Party Advisory
debian.org/security/2011/dsa-2290 · Third Party Advisory
exploit-db.com/exploits/17577 · Exploit
itrc.hp.com/service/cki/docDisplay.do · Broken Link
mandriva.com/security/advisories · Broken Link
samba.org/samba/security/CVE-2011-2522 · Vendor Advisory
securityfocus.com/bid/48899 · Third Party Advisory
bugzilla.redhat.com/show_bug.cgi · Issue Tracking
bugzilla.samba.org/show_bug.cgi · Issue Tracking
exchange.xforce.ibmcloud.com/vulnerabilities/68843 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free