NVD

Id
9431  
Name
CVE-2011-2694  
Description
Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the username parameter to the passwd program (aka the user field to the Change Password page).  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2011-07-29  
Modified Date
2011-10-03  
Seq
2011-2694  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
53820 9431 CVE-2011-2694 http://samba.org/samba/history/samba-3.5.10.html  View
53821 9431 CVE-2011-2694 1025852  View
53822 9431 CVE-2011-2694 USN-1182-1  View
53823 9431 CVE-2011-2694 DSA-2290  View
53824 9431 CVE-2011-2694 SSRT100598  View
53825 9431 CVE-2011-2694 http://www.samba.org/samba/security/CVE-2011-2694  View
53826 9431 CVE-2011-2694 48901  View
53827 9431 CVE-2011-2694 samba-user-xss(68844)  View
53828 9431 CVE-2011-2694 https://bugzilla.redhat.com/show_bug.cgi?id=722537  View
53829 9431 CVE-2011-2694 https://bugzilla.samba.org/show_bug.cgi?id=8289  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31871 JVNDB-2011-002111 Samba Web Administration Tool におけるクロスサイトスクリプティングの脆弱性 Samba Web Administration Tool (SWAT) には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2011-2694 50601 CVE-2011-2694 9431 2.6 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002111.html 2011-07-26 2012-12-26 View