CVE-2011-2694: XSS
Cross-site scripting (XSS) vulnerability in the chgpasswd function in web/swat.c in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the username parameter to the passwd program (aka the user field to the Change Password page).
Other sources
It was found that the 'Change Password' page / screen of the Samba Web Administration Tool did not properly sanitize content of the user-provided "user" field, prior printing it back to the page content. A remote attacker could provide a specially-crafted URL, which once visited by an authenticated Samba SWAT user could allow the attacker to conduct cross-site scripting attacks (execute arbitrary HTML or script code).
Upstream bug report: [1] https://bugzilla.samba.org/showbug.cgi?id=8290 (not public yet)
Acknowledgements:
Red Hat would like to thank the Samba project for reporting this issue. Upstream acknowledges Nobuhiro Tsuji of NTT DATA SECURITY CORPORATION as the original reporter.
— Red Hat
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-2694?
CVE-2011-2694 is classified as a medium severity vulnerability due to its potential for cross-site scripting exploitation.
How do I fix CVE-2011-2694?
To fix CVE-2011-2694, upgrade Samba to version 3.5.10 or later.
What applications are affected by CVE-2011-2694?
CVE-2011-2694 affects Samba versions prior to 3.5.10 across various Linux distributions.
Is CVE-2011-2694 a remote attack vector?
Yes, CVE-2011-2694 can be exploited remotely by authenticated administrators.
What type of vulnerability is CVE-2011-2694?
CVE-2011-2694 is a cross-site scripting (XSS) vulnerability.