Every CVESearch/Get API key

CVE-2011-2694

Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba...

2.6 LowFix available

Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the username parameter to the passwd program (aka the user field to the Change Password page).

Exploit likelihood

6.05%Up 2.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used2.6

Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the username parameter to the passwd program (aka the user field to the Change Password page).

Record
CVE-2011-2694
CVSS 2.0
2.6 LowAV:N/AC:H/Au:N/C:N/I:P/A:N
Weakness
CWE-79
Updated
2026-11-02
CVE ListNo score

Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the username parameter to the passwd program (aka the user field to the Change Password page).

Record
CVE-2011-2694
Updated
2026-11-02
EUVDEUVD-2011-2675No score

Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the username parameter to the passwd program (aka the user field to the Change Password page).

Record
EUVD-2011-2675
Updated
2026-11-03
GitHub AdvisoriesGHSA-9xqr-g3w9-82pjNo score

Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba...

Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the username parameter to the passwd program (aka the user field to the Change Password page).

Record
GHSA-9xqr-g3w9-82pj
Weakness
CWE-79
Updated
2026-11-02
OSVNo score

Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the username parameter to the passwd program (aka the user field to the Change Password page).

Record
CVE-2011-2694
Updated
2026-11-02
OSVDEBIAN-CVE-2011-2694No score

Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the username parameter to the passwd program (aka the user field to the Change Password page).

Record
DEBIAN-CVE-2011-2694
Updated
2026-11-02
OSVopenSUSE-SU-2024:10069-1No score

ctdb-4.5.0-1.1 on GA media

These are all security issues fixed in the ctdb-4.5.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10069-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
samba
Debian:12
before 2:3.5.10~dfsg-1
2:3.5.10~dfsg-1
samba
Debian:13
before 2:3.5.10~dfsg-1
2:3.5.10~dfsg-1
samba
Debian:14
before 2:3.5.10~dfsg-1
2:3.5.10~dfsg-1
samba
Debian:5.0
From an advisory covering 2 CVEs
before 2:3.2.5-4lenny15, plus listed versions
2:3.2.5-42:3.2.5-4lenny12:3.2.5-4lenny102:3.2.5-4lenny112:3.2.5-4lenny12
Show 9 moreShow less
2:3.2.5-4lenny132:3.2.5-4lenny142:3.2.5-4lenny22:3.2.5-4lenny32:3.2.5-4lenny42:3.2.5-4lenny62:3.2.5-4lenny72:3.2.5-4lenny82:3.2.5-4lenny9
2:3.2.5-4lenny15
samba
Debian:6.0
From an advisory covering 2 CVEs
before 2:3.5.6~dfsg-3squeeze5, plus listed versions
2:3.5.6~dfsg-32:3.5.6~dfsg-3squeeze12:3.5.6~dfsg-3squeeze22:3.5.6~dfsg-3squeeze32:3.5.6~dfsg-3squeeze4
2:3.5.6~dfsg-3squeeze5
samba
Red Hat:enterprise_linux:4::as
From an advisory covering 6 CVEs
before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-client
Red Hat:enterprise_linux:4::as
From an advisory covering 6 CVEs
before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-common
Red Hat:enterprise_linux:4::as
From an advisory covering 6 CVEs
before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-debuginfo
Red Hat:enterprise_linux:4::as
From an advisory covering 6 CVEs
before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-swat
Red Hat:enterprise_linux:4::as
From an advisory covering 6 CVEs
before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
Show 67 moreShow less
Affected packages
PackageAffectedFixed
samba
Red Hat:enterprise_linux:4::desktop
From an advisory covering 6 CVEs
before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-client
Red Hat:enterprise_linux:4::desktop
From an advisory covering 6 CVEs
before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-common
Red Hat:enterprise_linux:4::desktop
From an advisory covering 6 CVEs
before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-debuginfo
Red Hat:enterprise_linux:4::desktop
From an advisory covering 6 CVEs
before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-swat
Red Hat:enterprise_linux:4::desktop
From an advisory covering 6 CVEs
before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba
Red Hat:enterprise_linux:4::es
From an advisory covering 6 CVEs
before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-client
Red Hat:enterprise_linux:4::es
From an advisory covering 6 CVEs
before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-common
Red Hat:enterprise_linux:4::es
From an advisory covering 6 CVEs
before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-debuginfo
Red Hat:enterprise_linux:4::es
From an advisory covering 6 CVEs
before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-swat
Red Hat:enterprise_linux:4::es
From an advisory covering 6 CVEs
before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba
Red Hat:enterprise_linux:4::ws
From an advisory covering 6 CVEs
before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-client
Red Hat:enterprise_linux:4::ws
From an advisory covering 6 CVEs
before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-common
Red Hat:enterprise_linux:4::ws
From an advisory covering 6 CVEs
before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-debuginfo
Red Hat:enterprise_linux:4::ws
From an advisory covering 6 CVEs
before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-swat
Red Hat:enterprise_linux:4::ws
From an advisory covering 6 CVEs
before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
libsmbclient
Red Hat:enterprise_linux:5::client
From an advisory covering 6 CVEs
before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba
Red Hat:enterprise_linux:5::client
From an advisory covering 6 CVEs
before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba-client
Red Hat:enterprise_linux:5::client
From an advisory covering 6 CVEs
before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba-common
Red Hat:enterprise_linux:5::client
From an advisory covering 6 CVEs
before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 6 CVEs
before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba-swat
Red Hat:enterprise_linux:5::client
From an advisory covering 6 CVEs
before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
libsmbclient-devel
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba-debuginfo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 6 CVEs
before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
libsmbclient
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
libsmbclient-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba-client
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba-common
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba-swat
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba3x
Red Hat:enterprise_linux:5::client
From an advisory covering 4 CVEs
before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-client
Red Hat:enterprise_linux:5::client
From an advisory covering 4 CVEs
before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-common
Red Hat:enterprise_linux:5::client
From an advisory covering 4 CVEs
before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 4 CVEs
before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-doc
Red Hat:enterprise_linux:5::client
From an advisory covering 4 CVEs
before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-domainjoin-gui
Red Hat:enterprise_linux:5::client
From an advisory covering 4 CVEs
before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-swat
Red Hat:enterprise_linux:5::client
From an advisory covering 4 CVEs
before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-winbind
Red Hat:enterprise_linux:5::client
From an advisory covering 4 CVEs
before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 4 CVEs
before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-debuginfo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 4 CVEs
before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-winbind-devel
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 4 CVEs
before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-client
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-common
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-doc
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-domainjoin-gui
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-swat
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-winbind
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-winbind-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
cifs-utils
Red Hat:enterprise_linux:6::server
From an advisory covering 5 CVEs
before 0:4.8.1-2.el6_1.2
0:4.8.1-2.el6_1.2
cifs-utils-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 5 CVEs
before 0:4.8.1-2.el6_1.2
0:4.8.1-2.el6_1.2
libsmbclient
Red Hat:enterprise_linux:6::server
From an advisory covering 5 CVEs
before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba
Red Hat:enterprise_linux:6::server
From an advisory covering 5 CVEs
before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-client
Red Hat:enterprise_linux:6::server
From an advisory covering 5 CVEs
before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-common
Red Hat:enterprise_linux:6::server
From an advisory covering 5 CVEs
before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 5 CVEs
before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-winbind
Red Hat:enterprise_linux:6::server
From an advisory covering 5 CVEs
before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-winbind-clients
Red Hat:enterprise_linux:6::server
From an advisory covering 5 CVEs
before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
libsmbclient-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 5 CVEs
before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-doc
Red Hat:enterprise_linux:6::server
From an advisory covering 5 CVEs
before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-domainjoin-gui
Red Hat:enterprise_linux:6::server
From an advisory covering 5 CVEs
before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-swat
Red Hat:enterprise_linux:6::server
From an advisory covering 5 CVEs
before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-winbind-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 5 CVEs
before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-winbind-krb5-locator
Red Hat:enterprise_linux:6::server
From an advisory covering 5 CVEs
before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba
openSUSE:Tumbleweed
From an advisory covering 56 CVEs
before 4.5.0-1.1
4.5.0-1.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-2694 is a low vulnerability (CVSS 2.6) in Samba, published July 29, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.05%, the 93rd percentile. Fixed in samba 2:3.5.10~dfsg-1.

References

Show 103 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open