NVD

Id
9297  
Name
CVE-2011-2522  
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that (1) shut down daemons, (2) start daemons, (3) add shares, (4) remove shares, (5) add printers, (6) remove printers, (7) add user accounts, or (8) remove user accounts, as demonstrated by certain start, stop, and restart parameters to the status program.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-07-29  
Modified Date
2011-10-03  
Seq
2011-2522  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
53212 9297 CVE-2011-2522 JVN#29529126  View
53213 9297 CVE-2011-2522 http://samba.org/samba/history/samba-3.5.10.html  View
53214 9297 CVE-2011-2522 8317  View
53215 9297 CVE-2011-2522 1025852  View
53216 9297 CVE-2011-2522 USN-1182-1  View
53217 9297 CVE-2011-2522 DSA-2290  View
53218 9297 CVE-2011-2522 17577  View
53219 9297 CVE-2011-2522 SSRT100598  View
53220 9297 CVE-2011-2522 MDVSA-2011:121  View
53221 9297 CVE-2011-2522 http://www.samba.org/samba/security/CVE-2011-2522  View
53222 9297 CVE-2011-2522 48899  View
53223 9297 CVE-2011-2522 samba-swat-csrf(68843)  View
53224 9297 CVE-2011-2522 https://bugzilla.redhat.com/show_bug.cgi?id=721348  View
53225 9297 CVE-2011-2522 https://bugzilla.samba.org/show_bug.cgi?id=8290  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31870 JVNDB-2011-002110 Samba Web Administration Tool におけるクロスサイトリクエストフォージェリの脆弱性 Samba Web Administration Tool (SWAT) には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2011-2522 50429 CVE-2011-2522 9297 4 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002110.html 2011-07-26 2012-12-21 View