CVE-2011-2522

Advisory lineage Upstream: 0 Downstream: 6
Modified
Published: 29 Jul 2011, 20:00
Last modified:06 Aug 2024, 23:00

Vulnerability Summary

Overall Risk (default)
medium
41/100
CVSS Score
6.8 MEDIUM
v2.0 (nvd)
EPSS Score
17.51% MEDIUM
18% probability -1.74%
KEV
Not listed
Ransomware
No reports
Public exploits
1 found
Dark Web
Not detected

Timeline

29 Jul 2011, 20:00
Published
Vulnerability first disclosed
06 Aug 2024, 23:00
Last Modified
Vulnerability information updated

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that (1) shut down daemons, (2) start daemons, (3) add shares, (4) remove shares, (5) add printers, (6) remove printers, (7) add user accounts, or (8) remove user accounts, as demonstrated by certain start, stop, and restart parameters to the status program.

CVSS Metrics

  • v2.0•MEDIUM•Score: 6.8AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS Trends

Current EPSS score: 17.51%• Percentile: 95%

Techniques & Countermeasures

  • CWE-352•Cross-Site Request Forgery (CSRF)

    The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

Affected Systems

  • canonical•ubuntu_linux

    8.04 | 10.04 | 10.10 | 11.04

  • debian•debian_linux

    5.0 | 6.0 | 7.0

  • samba•samba

    ≥ 3.0.0, < 3.3.16 | ≥ 3.4.0, < 3.4.14 | ≥ 3.5.0, < 3.5.10

References (19)