Every CVE Search/ Get API key

CVE-2011-2694

Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba...

2.6 LowFix available

Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the username parameter to the passwd program (aka the user field to the Change Password page).

Exploit likelihood

6.05%Up 2.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 2.6

Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the username parameter to the passwd program (aka the user field to the Change Password page).

Record
CVE-2011-2694
CVSS 2.0
2.6 LowAV:N/AC:H/Au:N/C:N/I:P/A:N
Weakness
CWE-79
Updated
2026-11-02
CVE List No score

Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the username parameter to the passwd program (aka the user field to the Change Password page).

Record
CVE-2011-2694
Updated
2026-11-02
EUVDEUVD-2011-2675 No score

Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the username parameter to the passwd program (aka the user field to the Change Password page).

Record
EUVD-2011-2675
Updated
2026-11-03
GitHub AdvisoriesGHSA-9xqr-g3w9-82pj No score

Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba...

Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the username parameter to the passwd program (aka the user field to the Change Password page).

Record
GHSA-9xqr-g3w9-82pj
Weakness
CWE-79
Updated
2026-11-02
OSV No score

Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the username parameter to the passwd program (aka the user field to the Change Password page).

Record
CVE-2011-2694
Updated
2026-11-02
OSVDEBIAN-CVE-2011-2694 No score

Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the username parameter to the passwd program (aka the user field to the Change Password page).

Record
DEBIAN-CVE-2011-2694
Updated
2026-11-02
OSVopenSUSE-SU-2024:10069-1 No score

ctdb-4.5.0-1.1 on GA media

These are all security issues fixed in the ctdb-4.5.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10069-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
samba
Debian:12
 before 2:3.5.10~dfsg-1
2:3.5.10~dfsg-1
samba
Debian:13
 before 2:3.5.10~dfsg-1
2:3.5.10~dfsg-1
samba
Debian:14
 before 2:3.5.10~dfsg-1
2:3.5.10~dfsg-1
samba
Debian:5.0
 before 2:3.2.5-4lenny15, plus listed versions
2:3.2.5-42:3.2.5-4lenny12:3.2.5-4lenny102:3.2.5-4lenny112:3.2.5-4lenny12
Show 9 moreShow less
2:3.2.5-4lenny132:3.2.5-4lenny142:3.2.5-4lenny22:3.2.5-4lenny32:3.2.5-4lenny42:3.2.5-4lenny62:3.2.5-4lenny72:3.2.5-4lenny82:3.2.5-4lenny9
2:3.2.5-4lenny15
samba
Debian:6.0
 before 2:3.5.6~dfsg-3squeeze5, plus listed versions
2:3.5.6~dfsg-32:3.5.6~dfsg-3squeeze12:3.5.6~dfsg-3squeeze22:3.5.6~dfsg-3squeeze32:3.5.6~dfsg-3squeeze4
2:3.5.6~dfsg-3squeeze5
samba
Red Hat:enterprise_linux:4::as
 before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-client
Red Hat:enterprise_linux:4::as
 before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-common
Red Hat:enterprise_linux:4::as
 before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-swat
Red Hat:enterprise_linux:4::as
 before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
Show 67 moreShow less
Affected packages
PackageAffectedFixed
samba
Red Hat:enterprise_linux:4::desktop
 before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-client
Red Hat:enterprise_linux:4::desktop
 before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-common
Red Hat:enterprise_linux:4::desktop
 before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-swat
Red Hat:enterprise_linux:4::desktop
 before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba
Red Hat:enterprise_linux:4::es
 before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-client
Red Hat:enterprise_linux:4::es
 before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-common
Red Hat:enterprise_linux:4::es
 before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-swat
Red Hat:enterprise_linux:4::es
 before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba
Red Hat:enterprise_linux:4::ws
 before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-client
Red Hat:enterprise_linux:4::ws
 before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-common
Red Hat:enterprise_linux:4::ws
 before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-swat
Red Hat:enterprise_linux:4::ws
 before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
libsmbclient
Red Hat:enterprise_linux:5::client
 before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba
Red Hat:enterprise_linux:5::client
 before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba-client
Red Hat:enterprise_linux:5::client
 before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba-common
Red Hat:enterprise_linux:5::client
 before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba-swat
Red Hat:enterprise_linux:5::client
 before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
libsmbclient-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba
Red Hat:enterprise_linux:5::client_workstation
 before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
libsmbclient
Red Hat:enterprise_linux:5::server
 before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
libsmbclient-devel
Red Hat:enterprise_linux:5::server
 before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba
Red Hat:enterprise_linux:5::server
 before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba-client
Red Hat:enterprise_linux:5::server
 before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba-common
Red Hat:enterprise_linux:5::server
 before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba-swat
Red Hat:enterprise_linux:5::server
 before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba3x
Red Hat:enterprise_linux:5::client
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-client
Red Hat:enterprise_linux:5::client
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-common
Red Hat:enterprise_linux:5::client
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-doc
Red Hat:enterprise_linux:5::client
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-domainjoin-gui
Red Hat:enterprise_linux:5::client
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-swat
Red Hat:enterprise_linux:5::client
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-winbind
Red Hat:enterprise_linux:5::client
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x
Red Hat:enterprise_linux:5::client_workstation
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-winbind-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x
Red Hat:enterprise_linux:5::server
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-client
Red Hat:enterprise_linux:5::server
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-common
Red Hat:enterprise_linux:5::server
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-doc
Red Hat:enterprise_linux:5::server
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-domainjoin-gui
Red Hat:enterprise_linux:5::server
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-swat
Red Hat:enterprise_linux:5::server
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-winbind
Red Hat:enterprise_linux:5::server
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-winbind-devel
Red Hat:enterprise_linux:5::server
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
cifs-utils
Red Hat:enterprise_linux:6::server
 before 0:4.8.1-2.el6_1.2
0:4.8.1-2.el6_1.2
cifs-utils-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:4.8.1-2.el6_1.2
0:4.8.1-2.el6_1.2
libsmbclient
Red Hat:enterprise_linux:6::server
 before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba
Red Hat:enterprise_linux:6::server
 before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-client
Red Hat:enterprise_linux:6::server
 before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-common
Red Hat:enterprise_linux:6::server
 before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-winbind
Red Hat:enterprise_linux:6::server
 before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-winbind-clients
Red Hat:enterprise_linux:6::server
 before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
libsmbclient-devel
Red Hat:enterprise_linux:6::server
 before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-doc
Red Hat:enterprise_linux:6::server
 before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-domainjoin-gui
Red Hat:enterprise_linux:6::server
 before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-swat
Red Hat:enterprise_linux:6::server
 before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-winbind-devel
Red Hat:enterprise_linux:6::server
 before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-winbind-krb5-locator
Red Hat:enterprise_linux:6::server
 before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba
openSUSE:Tumbleweed
 before 4.5.0-1.1
4.5.0-1.1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-2694 is a low vulnerability (CVSS 2.6) in Samba, published July 29, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.05%, the 93rd percentile. Fixed in samba 2:3.5.10~dfsg-1.

References

Show 103 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open