CVE

Id
60161  
CVE No.
CVE-2013-0214  
Status
Candidate  
Description
Cross-site request forgery (CSRF) vulnerability in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.21, 3.6.x before 3.6.12, and 4.x before 4.0.2 allows remote attackers to hijack the authentication of arbitrary users by leveraging knowledge of a password and composing requests that perform SWAT actions.  
Phase
Assigned (20121206)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
607244 60161 CVE-2013-0214 CONFIRM:http://www.samba.org/samba/security/CVE-2013-0214  View
607245 60161 CVE-2013-0214 CONFIRM:https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05115993  View
607246 60161 CVE-2013-0214 DEBIAN:DSA-2617  View
607247 60161 CVE-2013-0214 URL:http://www.debian.org/security/2013/dsa-2617  View
607248 60161 CVE-2013-0214 REDHAT:RHSA-2013:1310  View
607249 60161 CVE-2013-0214 URL:http://rhn.redhat.com/errata/RHSA-2013-1310.html  View
607250 60161 CVE-2013-0214 REDHAT:RHSA-2013:1542  View
607251 60161 CVE-2013-0214 URL:http://rhn.redhat.com/errata/RHSA-2013-1542.html  View
607252 60161 CVE-2013-0214 REDHAT:RHSA-2014:0305  View
607253 60161 CVE-2013-0214 URL:http://rhn.redhat.com/errata/RHSA-2014-0305.html  View
607254 60161 CVE-2013-0214 SUSE:SUSE-SU-2013:0326  View
607255 60161 CVE-2013-0214 URL:http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00019.html  View
607256 60161 CVE-2013-0214 SUSE:openSUSE-SU-2013:0277  View
607257 60161 CVE-2013-0214 URL:http://lists.opensuse.org/opensuse-updates/2013-02/msg00029.html  View
607258 60161 CVE-2013-0214 SUSE:openSUSE-SU-2013:0281  View
607259 60161 CVE-2013-0214 URL:http://lists.opensuse.org/opensuse-updates/2013-02/msg00033.html  View
607260 60161 CVE-2013-0214 SUSE:SUSE-SU-2013:0519  View
607261 60161 CVE-2013-0214 URL:http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00042.html  View
607262 60161 CVE-2013-0214 UBUNTU:USN-2922-1  View
607263 60161 CVE-2013-0214 URL:http://www.ubuntu.com/usn/USN-2922-1  View
607264 60161 CVE-2013-0214 BID:57631  View
607265 60161 CVE-2013-0214 URL:http://www.securityfocus.com/bid/57631  View
607266 60161 CVE-2013-0214 OSVDB:89627  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
20108 JVNDB-2013-001683 System Security Services Daemon における任意のファイルを作成される脆弱性 System Security Services Daemon (SSSD) には、ユーザのホームディレクトリツリーを (1) 作成、(2) コピー、または (3) 削除する際、任意のファイルを作成、変更、または削除される脆弱性が存在します。 CVE-2013-0219 60161 3.7 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001683.html  View