Every CVE Search/ Get API key

CVE-2011-2522

Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool ...

6.8 MediumPublic exploitFix available

Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that (1) shut down daemons, (2) start daemons, (3) add shares, (4) remove shares, (5) add printers, (6) remove printers, (7) add user accounts, or (8) remove user accounts, as demonstrated by certain start, stop, and restart parameters to the status program.

Exploit likelihood

10.6%Down 1.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.8

Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that (1) shut down daemons, (2) start daemons, (3) add shares, (4) remove shares, (5) add printers, (6) remove printers, (7) add user accounts, or (8) remove user accounts, as demonstrated by certain start, stop, and restart parameters to the status program.

Record
CVE-2011-2522
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-352
Updated
2026-11-02
CVE List No score

Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that (1) shut down daemons, (2) start daemons, (3) add shares, (4) remove shares, (5) add printers, (6) remove printers, (7) add user accounts, or (8) remove user accounts, as demonstrated by certain start, stop, and restart parameters to the status program.

Record
CVE-2011-2522
Updated
2026-11-02
EUVDEUVD-2011-2507 No score

Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that (1) shut down daemons, (2) start daemons, (3) add shares, (4) remove shares, (5) add printers, (6) remove printers, (7) add user accounts, or (8) remove user accounts, as demonstrated by certain start, stop, and restart parameters to the status program.

Record
EUVD-2011-2507
Updated
2026-11-03
GitHub AdvisoriesGHSA-5cxg-6999-xfwq No score

Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool ...

Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that (1) shut down daemons, (2) start daemons, (3) add shares, (4) remove shares, (5) add printers, (6) remove printers, (7) add user accounts, or (8) remove user accounts, as demonstrated by certain start, stop, and restart parameters to the status program.

Record
GHSA-5cxg-6999-xfwq
Weakness
CWE-352
Updated
2026-11-02
OSV No score

Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that (1) shut down daemons, (2) start daemons, (3) add shares, (4) remove shares, (5) add printers, (6) remove printers, (7) add user accounts, or (8) remove user accounts, as demonstrated by certain start, stop, and restart parameters to the status program.

Record
CVE-2011-2522
Updated
2026-11-02
OSVDEBIAN-CVE-2011-2522 No score

Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that (1) shut down daemons, (2) start daemons, (3) add shares, (4) remove shares, (5) add printers, (6) remove printers, (7) add user accounts, or (8) remove user accounts, as demonstrated by certain start, stop, and restart parameters to the status program.

Record
DEBIAN-CVE-2011-2522
Updated
2026-11-02
OSVopenSUSE-SU-2024:10069-1 No score

ctdb-4.5.0-1.1 on GA media

These are all security issues fixed in the ctdb-4.5.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10069-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
samba
Debian:12
 before 2:3.5.10~dfsg-1
2:3.5.10~dfsg-1
samba
Debian:13
 before 2:3.5.10~dfsg-1
2:3.5.10~dfsg-1
samba
Debian:14
 before 2:3.5.10~dfsg-1
2:3.5.10~dfsg-1
samba
Debian:5.0
 before 2:3.2.5-4lenny15, plus listed versions
2:3.2.5-42:3.2.5-4lenny12:3.2.5-4lenny102:3.2.5-4lenny112:3.2.5-4lenny12
Show 9 moreShow less
2:3.2.5-4lenny132:3.2.5-4lenny142:3.2.5-4lenny22:3.2.5-4lenny32:3.2.5-4lenny42:3.2.5-4lenny62:3.2.5-4lenny72:3.2.5-4lenny82:3.2.5-4lenny9
2:3.2.5-4lenny15
samba
Debian:6.0
 before 2:3.5.6~dfsg-3squeeze5, plus listed versions
2:3.5.6~dfsg-32:3.5.6~dfsg-3squeeze12:3.5.6~dfsg-3squeeze22:3.5.6~dfsg-3squeeze32:3.5.6~dfsg-3squeeze4
2:3.5.6~dfsg-3squeeze5
samba
Red Hat:enterprise_linux:4::as
 before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-client
Red Hat:enterprise_linux:4::as
 before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-common
Red Hat:enterprise_linux:4::as
 before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-swat
Red Hat:enterprise_linux:4::as
 before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
Show 67 moreShow less
Affected packages
PackageAffectedFixed
samba
Red Hat:enterprise_linux:4::desktop
 before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-client
Red Hat:enterprise_linux:4::desktop
 before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-common
Red Hat:enterprise_linux:4::desktop
 before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-swat
Red Hat:enterprise_linux:4::desktop
 before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba
Red Hat:enterprise_linux:4::es
 before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-client
Red Hat:enterprise_linux:4::es
 before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-common
Red Hat:enterprise_linux:4::es
 before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-swat
Red Hat:enterprise_linux:4::es
 before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba
Red Hat:enterprise_linux:4::ws
 before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-client
Red Hat:enterprise_linux:4::ws
 before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-common
Red Hat:enterprise_linux:4::ws
 before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-swat
Red Hat:enterprise_linux:4::ws
 before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
libsmbclient
Red Hat:enterprise_linux:5::client
 before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba
Red Hat:enterprise_linux:5::client
 before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba-client
Red Hat:enterprise_linux:5::client
 before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba-common
Red Hat:enterprise_linux:5::client
 before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba-swat
Red Hat:enterprise_linux:5::client
 before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
libsmbclient-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba
Red Hat:enterprise_linux:5::client_workstation
 before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
libsmbclient
Red Hat:enterprise_linux:5::server
 before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
libsmbclient-devel
Red Hat:enterprise_linux:5::server
 before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba
Red Hat:enterprise_linux:5::server
 before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba-client
Red Hat:enterprise_linux:5::server
 before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba-common
Red Hat:enterprise_linux:5::server
 before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba-swat
Red Hat:enterprise_linux:5::server
 before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba3x
Red Hat:enterprise_linux:5::client
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-client
Red Hat:enterprise_linux:5::client
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-common
Red Hat:enterprise_linux:5::client
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-doc
Red Hat:enterprise_linux:5::client
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-domainjoin-gui
Red Hat:enterprise_linux:5::client
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-swat
Red Hat:enterprise_linux:5::client
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-winbind
Red Hat:enterprise_linux:5::client
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x
Red Hat:enterprise_linux:5::client_workstation
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-winbind-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x
Red Hat:enterprise_linux:5::server
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-client
Red Hat:enterprise_linux:5::server
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-common
Red Hat:enterprise_linux:5::server
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-doc
Red Hat:enterprise_linux:5::server
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-domainjoin-gui
Red Hat:enterprise_linux:5::server
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-swat
Red Hat:enterprise_linux:5::server
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-winbind
Red Hat:enterprise_linux:5::server
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-winbind-devel
Red Hat:enterprise_linux:5::server
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
cifs-utils
Red Hat:enterprise_linux:6::server
 before 0:4.8.1-2.el6_1.2
0:4.8.1-2.el6_1.2
cifs-utils-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:4.8.1-2.el6_1.2
0:4.8.1-2.el6_1.2
libsmbclient
Red Hat:enterprise_linux:6::server
 before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba
Red Hat:enterprise_linux:6::server
 before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-client
Red Hat:enterprise_linux:6::server
 before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-common
Red Hat:enterprise_linux:6::server
 before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-winbind
Red Hat:enterprise_linux:6::server
 before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-winbind-clients
Red Hat:enterprise_linux:6::server
 before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
libsmbclient-devel
Red Hat:enterprise_linux:6::server
 before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-doc
Red Hat:enterprise_linux:6::server
 before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-domainjoin-gui
Red Hat:enterprise_linux:6::server
 before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-swat
Red Hat:enterprise_linux:6::server
 before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-winbind-devel
Red Hat:enterprise_linux:6::server
 before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-winbind-krb5-locator
Red Hat:enterprise_linux:6::server
 before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba
openSUSE:Tumbleweed
 before 4.5.0-1.1
4.5.0-1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBSWAT Samba Web Administration Tool - Cross-Site Request Forgery2011-07-27

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-2522 is a medium vulnerability (CVSS 6.8) in Samba, published July 29, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 10.6%, the 95th percentile. Fixed in samba 2:3.5.10~dfsg-1.

References

Show 106 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open