DEBIAN-CVE-2011-2694

Advisory lineage Upstream: 1 Downstream: 1
Upstream
CVE-2011-2694
Downstream
DSA-2290-1
Published: 29 Jul 2011, 20:55
Last modified:28 Apr 2026, 20:06

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

29 Jul 2011, 20:55
Published
Vulnerability first disclosed
28 Apr 2026, 20:06
Last Modified
Vulnerability information updated

Description

Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the username parameter to the passwd program (aka the user field to the Change Password page).

Affected Systems

  • debian•samba

    < 2:3.5.10~dfsg-1 | < 2:3.5.10~dfsg-1 | < 2:3.5.10~dfsg-1 | < 2:3.5.10~dfsg-1

References (1)