ByteOS Network

CVE Vulnerability Details :

CVE-2011-2694

PUBLISHED

More Info Official Page

Assigner-redhat

Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749

Published At-29 Jul, 2011 | 20:00

Updated At-06 Aug, 2024 | 23:08

▼CVE Numbering Authority (CNA)

Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the username parameter to the passwd program (aka the user field to the Change Password page).

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.mandriva.com/security/advisories?name=MDVSA-2011:121	vendor-advisory x_refsource_MANDRIVA
http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c03008543	vendor-advisory x_refsource_HP
http://securitytracker.com/id?1025852	vdb-entry x_refsource_SECTRACK
http://jvn.jp/en/jp/JVN63041502/index.html	third-party-advisory x_refsource_JVN
http://www.debian.org/security/2011/dsa-2290	vendor-advisory x_refsource_DEBIAN
http://osvdb.org/74072	vdb-entry x_refsource_OSVDB
http://secunia.com/advisories/45393	third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/45496	third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/45488	third-party-advisory x_refsource_SECUNIA
http://samba.org/samba/history/samba-3.5.10.html	x_refsource_CONFIRM
http://www.securityfocus.com/bid/48901	vdb-entry x_refsource_BID
http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c03008543	vendor-advisory x_refsource_HP
https://bugzilla.samba.org/show_bug.cgi?id=8289	x_refsource_CONFIRM
http://www.samba.org/samba/security/CVE-2011-2694	x_refsource_CONFIRM
http://ubuntu.com/usn/usn-1182-1	vendor-advisory x_refsource_UBUNTU
https://exchange.xforce.ibmcloud.com/vulnerabilities/68844	vdb-entry x_refsource_XF
https://bugzilla.redhat.com/show_bug.cgi?id=722537	x_refsource_CONFIRM

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2011:121

Resource:

vendor-advisory

x_refsource_MANDRIVA

Hyperlink: http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c03008543

Resource:

vendor-advisory

x_refsource_HP

Hyperlink: http://securitytracker.com/id?1025852

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://jvn.jp/en/jp/JVN63041502/index.html

Resource:

third-party-advisory

x_refsource_JVN

Hyperlink: http://www.debian.org/security/2011/dsa-2290

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: http://osvdb.org/74072

Resource:

vdb-entry

x_refsource_OSVDB

Hyperlink: http://secunia.com/advisories/45393

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://secunia.com/advisories/45496

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://secunia.com/advisories/45488

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://samba.org/samba/history/samba-3.5.10.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securityfocus.com/bid/48901

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c03008543

Resource:

vendor-advisory

x_refsource_HP

Hyperlink: https://bugzilla.samba.org/show_bug.cgi?id=8289

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.samba.org/samba/security/CVE-2011-2694

Resource:

x_refsource_CONFIRM

Hyperlink: http://ubuntu.com/usn/usn-1182-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/68844

Resource:

vdb-entry

x_refsource_XF

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=722537

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.mandriva.com/security/advisories?name=MDVSA-2011:121	vendor-advisory x_refsource_MANDRIVA x_transferred
http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c03008543	vendor-advisory x_refsource_HP x_transferred
http://securitytracker.com/id?1025852	vdb-entry x_refsource_SECTRACK x_transferred
http://jvn.jp/en/jp/JVN63041502/index.html	third-party-advisory x_refsource_JVN x_transferred
http://www.debian.org/security/2011/dsa-2290	vendor-advisory x_refsource_DEBIAN x_transferred
http://osvdb.org/74072	vdb-entry x_refsource_OSVDB x_transferred
http://secunia.com/advisories/45393	third-party-advisory x_refsource_SECUNIA x_transferred
http://secunia.com/advisories/45496	third-party-advisory x_refsource_SECUNIA x_transferred
http://secunia.com/advisories/45488	third-party-advisory x_refsource_SECUNIA x_transferred
http://samba.org/samba/history/samba-3.5.10.html	x_refsource_CONFIRM x_transferred
http://www.securityfocus.com/bid/48901	vdb-entry x_refsource_BID x_transferred
http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c03008543	vendor-advisory x_refsource_HP x_transferred
https://bugzilla.samba.org/show_bug.cgi?id=8289	x_refsource_CONFIRM x_transferred
http://www.samba.org/samba/security/CVE-2011-2694	x_refsource_CONFIRM x_transferred
http://ubuntu.com/usn/usn-1182-1	vendor-advisory x_refsource_UBUNTU x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/68844	vdb-entry x_refsource_XF x_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=722537	x_refsource_CONFIRM x_transferred