CVE-2013-0214: CSRF
First published: Sat Feb 02 2013(Updated: )
Cross-site request forgery (CSRF) vulnerability in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.21, 3.6.x before 3.6.12, and 4.x before 4.0.2 allows remote attackers to hijack the authentication of arbitrary users by leveraging knowledge of a password and composing requests that perform SWAT actions.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Samba | =3.6.0 | |
| Samba | =3.6.1 | |
| Samba | =3.6.2 | |
| Samba | =3.6.3 | |
| Samba | =3.6.4 | |
| Samba | =3.6.5 | |
| Samba | =3.6.6 | |
| Samba | =3.6.7 | |
| Samba | =3.6.8 | |
| Samba | =3.6.9 | |
| Samba | =3.6.10 | |
| Samba | =3.6.11 | |
| Samba | =4.0.0 | |
| Samba | =4.0.1 | |
| Samba | =3.0.0 | |
| Samba | =3.0.1 | |
| Samba | =3.0.2 | |
| Samba | =3.0.2-a | |
| Samba | =3.0.2a | |
| Samba | =3.0.3 | |
| Samba | =3.0.4 | |
| Samba | =3.0.4-rc1 | |
| Samba | =3.0.5 | |
| Samba | =3.0.6 | |
| Samba | =3.0.7 | |
| Samba | =3.0.8 | |
| Samba | =3.0.9 | |
| Samba | =3.0.10 | |
| Samba | =3.0.11 | |
| Samba | =3.0.12 | |
| Samba | =3.0.13 | |
| Samba | =3.0.14 | |
| Samba | =3.0.14-a | |
| Samba | =3.0.14a | |
| Samba | =3.0.15 | |
| Samba | =3.0.16 | |
| Samba | =3.0.17 | |
| Samba | =3.0.18 | |
| Samba | =3.0.19 | |
| Samba | =3.0.20 | |
| Samba | =3.0.20-a | |
| Samba | =3.0.20-b | |
| Samba | =3.0.20a | |
| Samba | =3.0.20b | |
| Samba | =3.0.21 | |
| Samba | =3.0.21-a | |
| Samba | =3.0.21-b | |
| Samba | =3.0.21-c | |
| Samba | =3.0.21a | |
| Samba | =3.0.21b | |
| Samba | =3.0.21c | |
| Samba | =3.0.22 | |
| Samba | =3.0.23 | |
| Samba | =3.0.23-a | |
| Samba | =3.0.23-b | |
| Samba | =3.0.23-c | |
| Samba | =3.0.23-d | |
| Samba | =3.0.23a | |
| Samba | =3.0.23b | |
| Samba | =3.0.23c | |
| Samba | =3.0.23d | |
| Samba | =3.0.24 | |
| Samba | =3.0.25 | |
| Samba | =3.0.25-a | |
| Samba | =3.0.25-b | |
| Samba | =3.0.25-c | |
| Samba | =3.0.25-pre1 | |
| Samba | =3.0.25-pre2 | |
| Samba | =3.0.25-rc1 | |
| Samba | =3.0.25-rc2 | |
| Samba | =3.0.25-rc3 | |
| Samba | =3.0.25a | |
| Samba | =3.0.25b | |
| Samba | =3.0.25c | |
| Samba | =3.0.26 | |
| Samba | =3.0.26-a | |
| Samba | =3.0.26a | |
| Samba | =3.0.27 | |
| Samba | =3.0.27-a | |
| Samba | =3.0.28 | |
| Samba | =3.0.28-a | |
| Samba | =3.0.29 | |
| Samba | =3.0.30 | |
| Samba | =3.0.31 | |
| Samba | =3.0.32 | |
| Samba | =3.0.33 | |
| Samba | =3.0.34 | |
| Samba | =3.0.35 | |
| Samba | =3.0.36 | |
| Samba | =3.0.37 | |
| Samba | =3.1.0 | |
| Samba | =3.2.0 | |
| Samba | =3.2.1 | |
| Samba | =3.2.2 | |
| Samba | =3.2.3 | |
| Samba | =3.2.4 | |
| Samba | =3.2.5 | |
| Samba | =3.2.6 | |
| Samba | =3.2.7 | |
| Samba | =3.2.8 | |
| Samba | =3.2.9 | |
| Samba | =3.2.10 | |
| Samba | =3.2.11 | |
| Samba | =3.2.12 | |
| Samba | =3.2.13 | |
| Samba | =3.2.14 | |
| Samba | =3.2.15 | |
| Samba | =3.3.0 | |
| Samba | =3.3.1 | |
| Samba | =3.3.2 | |
| Samba | =3.3.3 | |
| Samba | =3.3.4 | |
| Samba | =3.3.5 | |
| Samba | =3.3.6 | |
| Samba | =3.3.7 | |
| Samba | =3.3.8 | |
| Samba | =3.3.9 | |
| Samba | =3.3.10 | |
| Samba | =3.3.11 | |
| Samba | =3.3.12 | |
| Samba | =3.3.13 | |
| Samba | =3.3.14 | |
| Samba | =3.3.15 | |
| Samba | =3.3.16 | |
| Samba | =3.4.0 | |
| Samba | =3.4.1 | |
| Samba | =3.4.2 | |
| Samba | =3.4.3 | |
| Samba | =3.4.4 | |
| Samba | =3.4.5 | |
| Samba | =3.4.6 | |
| Samba | =3.4.7 | |
| Samba | =3.4.8 | |
| Samba | =3.4.9 | |
| Samba | =3.4.10 | |
| Samba | =3.4.11 | |
| Samba | =3.4.12 | |
| Samba | =3.4.13 | |
| Samba | =3.4.14 | |
| Samba | =3.4.15 | |
| Samba | =3.4.16 | |
| Samba | =3.4.17 | |
| Samba | =3.5.0 | |
| Samba | =3.5.1 | |
| Samba | =3.5.2 | |
| Samba | =3.5.3 | |
| Samba | =3.5.4 | |
| Samba | =3.5.5 | |
| Samba | =3.5.6 | |
| Samba | =3.5.7 | |
| Samba | =3.5.8 | |
| Samba | =3.5.9 | |
| Samba | =3.5.10 | |
| Samba | =3.5.11 | |
| Samba | =3.5.12 | |
| Samba | =3.5.13 | |
| Samba | =3.5.14 | |
| Samba | =3.5.15 | |
| Samba | =3.5.16 | |
| Samba | =3.5.17 | |
| Samba | =3.5.18 | |
| Samba | =3.5.19 | |
| Samba | =3.5.20 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00019.html
- http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00042.html
- http://lists.opensuse.org/opensuse-updates/2013-02/msg00029.html
- http://lists.opensuse.org/opensuse-updates/2013-02/msg00033.html
- http://osvdb.org/89627
- http://rhn.redhat.com/errata/RHSA-2013-1310.html
- http://rhn.redhat.com/errata/RHSA-2013-1542.html
- http://rhn.redhat.com/errata/RHSA-2014-0305.html
- http://www.debian.org/security/2013/dsa-2617
- http://www.samba.org/samba/security/CVE-2013-0214
- http://www.securityfocus.com/bid/57631
- http://www.ubuntu.com/usn/USN-2922-1
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05115993
Frequently Asked Questions
What is the severity of CVE-2013-0214?
CVE-2013-0214 has been assessed as a moderate severity vulnerability allowing attackers to hijack user authentication.
How do I fix CVE-2013-0214?
To fix CVE-2013-0214, upgrade Samba to version 3.5.21, 3.6.12 or later, or 4.0.2 or later.
Which versions of Samba are affected by CVE-2013-0214?
CVE-2013-0214 affects Samba versions 3.x before 3.5.21 and 3.6.x before 3.6.12, as well as 4.x before 4.0.2.
What type of vulnerability is CVE-2013-0214?
CVE-2013-0214 is a Cross-site request forgery (CSRF) vulnerability.
Can CVE-2013-0214 be exploited remotely?
Yes, CVE-2013-0214 can be exploited remotely if an attacker has knowledge of the user's password.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/last-modified-date
- agent/references
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/weakness
- vendor/samba
- canonical/samba
- version/samba/3.6.0
- version/samba/3.6.1
- version/samba/3.6.2
- version/samba/3.6.3
- version/samba/3.6.4
- version/samba/3.6.5
- version/samba/3.6.6
- version/samba/3.6.7
- version/samba/3.6.8
- version/samba/3.6.9
- version/samba/3.6.10
- version/samba/3.6.11
- version/samba/4.0.0
- version/samba/4.0.1
- version/samba/3.0.0
- version/samba/3.0.1
- version/samba/3.0.2
- version/samba/3.0.2-a
- version/samba/3.0.2a
- version/samba/3.0.3
- version/samba/3.0.4
- version/samba/3.0.4-rc1
- version/samba/3.0.5
- version/samba/3.0.6
- version/samba/3.0.7
- version/samba/3.0.8
- version/samba/3.0.9
- version/samba/3.0.10
- version/samba/3.0.11
- version/samba/3.0.12
- version/samba/3.0.13
- version/samba/3.0.14
- version/samba/3.0.14-a
- version/samba/3.0.14a
- version/samba/3.0.15
- version/samba/3.0.16
- version/samba/3.0.17
- version/samba/3.0.18
- version/samba/3.0.19
- version/samba/3.0.20
- version/samba/3.0.20-a
- version/samba/3.0.20-b
- version/samba/3.0.20a
- version/samba/3.0.20b
- version/samba/3.0.21
- version/samba/3.0.21-a
- version/samba/3.0.21-b
- version/samba/3.0.21-c
- version/samba/3.0.21a
- version/samba/3.0.21b
- version/samba/3.0.21c
- version/samba/3.0.22
- version/samba/3.0.23
- version/samba/3.0.23-a
- version/samba/3.0.23-b
- version/samba/3.0.23-c
- version/samba/3.0.23-d
- version/samba/3.0.23a
- version/samba/3.0.23b
- version/samba/3.0.23c
- version/samba/3.0.23d
- version/samba/3.0.24
- version/samba/3.0.25
- version/samba/3.0.25-a
- version/samba/3.0.25-b
- version/samba/3.0.25-c
- version/samba/3.0.25-pre1
- version/samba/3.0.25-pre2
- version/samba/3.0.25-rc1
- version/samba/3.0.25-rc2
- version/samba/3.0.25-rc3
- version/samba/3.0.25a
- version/samba/3.0.25b
- version/samba/3.0.25c
- version/samba/3.0.26
- version/samba/3.0.26-a
- version/samba/3.0.26a
- version/samba/3.0.27
- version/samba/3.0.27-a
- version/samba/3.0.28
- version/samba/3.0.28-a
- version/samba/3.0.29
- version/samba/3.0.30
- version/samba/3.0.31
- version/samba/3.0.32
- version/samba/3.0.33
- version/samba/3.0.34
- version/samba/3.0.35
- version/samba/3.0.36
- version/samba/3.0.37
- version/samba/3.1.0
- version/samba/3.2.0
- version/samba/3.2.1
- version/samba/3.2.2
- version/samba/3.2.3
- version/samba/3.2.4
- version/samba/3.2.5
- version/samba/3.2.6
- version/samba/3.2.7
- version/samba/3.2.8
- version/samba/3.2.9
- version/samba/3.2.10
- version/samba/3.2.11
- version/samba/3.2.12
- version/samba/3.2.13
- version/samba/3.2.14
- version/samba/3.2.15
- version/samba/3.3.0
- version/samba/3.3.1
- version/samba/3.3.2
- version/samba/3.3.3
- version/samba/3.3.4
- version/samba/3.3.5
- version/samba/3.3.6
- version/samba/3.3.7
- version/samba/3.3.8
- version/samba/3.3.9
- version/samba/3.3.10
- version/samba/3.3.11
- version/samba/3.3.12
- version/samba/3.3.13
- version/samba/3.3.14
- version/samba/3.3.15
- version/samba/3.3.16
- version/samba/3.4.0
- version/samba/3.4.1
- version/samba/3.4.2
- version/samba/3.4.3
- version/samba/3.4.4
- version/samba/3.4.5
- version/samba/3.4.6
- version/samba/3.4.7
- version/samba/3.4.8
- version/samba/3.4.9
- version/samba/3.4.10
- version/samba/3.4.11
- version/samba/3.4.12
- version/samba/3.4.13
- version/samba/3.4.14
- version/samba/3.4.15
- version/samba/3.4.16
- version/samba/3.4.17
- version/samba/3.5.0
- version/samba/3.5.1
- version/samba/3.5.2
- version/samba/3.5.3
- version/samba/3.5.4
- version/samba/3.5.5
- version/samba/3.5.6
- version/samba/3.5.7
- version/samba/3.5.8
- version/samba/3.5.9
- version/samba/3.5.10
- version/samba/3.5.11
- version/samba/3.5.12
- version/samba/3.5.13
- version/samba/3.5.14
- version/samba/3.5.15
- version/samba/3.5.16
- version/samba/3.5.17
- version/samba/3.5.18
- version/samba/3.5.19
- version/samba/3.5.20