CVE-2011-2522

TRUNG BÌNH 6.8CVE-2011-2522 · Công bố 29/07/2011 · cập nhật 16/06/2026

Gói / sản phẩm	Phiên bản bị ảnh hưởng	Phiên bản đã vá
samba samba	`≥ 3.0.0, < 3.3.16≥ 3.4.0, < 3.4.14≥ 3.5.0, < 3.5.10`	`3.3.163.4.143.5.10`

Mô tả

Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that (1) shut down daemons, (2) start daemons, (3) add shares, (4) remove shares, (5) add printers, (6) remove printers, (7) add user accounts, or (8) remove user accounts, as demonstrated by certain start, stop, and restart parameters to the status program.

Tham khảo

jvn.jp/en/jp/JVN29529126/index.html · Third Party Advisory
marc.info · Mailing List
osvdb.org/74071 · Broken Link
samba.org/samba/history/samba-3.5.10.html · Vendor Advisory
secunia.com/advisories/45393 · Third Party Advisory
secunia.com/advisories/45488 · Third Party Advisory
secunia.com/advisories/45496 · Third Party Advisory
securityreason.com/securityalert/8317 · Third Party Advisory
securitytracker.com/id · Third Party Advisory
ubuntu.com/usn/usn-1182-1 · Third Party Advisory
debian.org/security/2011/dsa-2290 · Third Party Advisory
exploit-db.com/exploits/17577 · Exploit
itrc.hp.com/service/cki/docDisplay.do · Broken Link
mandriva.com/security/advisories · Broken Link
samba.org/samba/security/CVE-2011-2522 · Vendor Advisory
securityfocus.com/bid/48899 · Third Party Advisory
bugzilla.redhat.com/show_bug.cgi · Issue Tracking
bugzilla.samba.org/show_bug.cgi · Issue Tracking
exchange.xforce.ibmcloud.com/vulnerabilities/68843 · Third Party Advisory

Bạn đang dùng một trong các sản phẩm này? Quét site để biết có đang lộ phiên bản có lỗ hổng không.

Quét site miễn phí