Home > Vulnerability Database > CVE-2011-2522

Mend.io Vulnerability Database

CVE-2011-2522

Date: July 29, 2011

Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that (1) shut down daemons, (2) start daemons, (3) add shares, (4) remove shares, (5) add printers, (6) remove printers, (7) add user accounts, or (8) remove user accounts, as demonstrated by certain start, stop, and restart parameters to the status program.

Severity Score

5.6

Related Resources (24)

Url: http://marc.info/?l=bugtraq&m=133527864025056&w=2

Url: http://samba.org/samba/history/samba-3.5.10.html

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/68843

Url: https://bugzilla.redhat.com/show_bug.cgi?id=721348

Url: http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c03008543

Url: http://www.debian.org/security/2011/dsa-2290

Url: https://access.redhat.com/security/cve/CVE-2011-2522

Url: http://www.securityfocus.com/bid/48899

Url: http://osvdb.org/74071

Url: https://bugzilla.samba.org/show_bug.cgi?id=8290

Url: https://security-tracker.debian.org/tracker/CVE-2011-2522

Url: http://www.exploit-db.com/exploits/17577

Url: http://secunia.com/advisories/45488

Url: https://nvd.nist.gov/vuln/detail/CVE-2011-2522

Url: http://securitytracker.com/id?1025852

Url: http://secunia.com/advisories/45496

Url: http://ubuntu.com/usn/usn-1182-1

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2011:121

Url: http://secunia.com/advisories/45393

Url: http://securityreason.com/securityalert/8317

Url: http://www.samba.org/samba/security/CVE-2011-2522

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2011-2522

Url: http://jvn.jp/en/jp/JVN29529126/index.html

Url: https://www.mend.io/vulnerability-database/CVE-2011-2522

Severity Score

5.6

Weakness Type (CWE)

Cross-Site Request Forgery (CSRF)

CWE-352

CVSS v3.1

Base Score:	5.6
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	LOW

CVSS v2

Base Score:	6.8
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2011-2522

Date: July 29, 2011

Severity Score

Related Resources (24)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?