{"id":"CVE-2011-2694","aliases":["DEBIAN-CVE-2011-2694","DSA-2290-1","EUVD-2011-2675","GHSA-9xqr-g3w9-82pj","RHSA-2011:1219","RHSA-2011:1220","RHSA-2011:1221","openSUSE-SU-2024:10069-1"],"status":"published","title":"Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba...","description":"Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the username parameter to the passwd program (aka the user field to the Change Password page).","severity":{"version":"2.0","score":2.6,"vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.06049,"percentile":0.93418,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-79"],"published":"2011-07-29T20:00:00Z","modified":"2026-10-23T17:47:27Z","fixes":[{"ecosystem":"Debian:12","package":"samba","fixed_in":["2:3.5.10~dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"samba","fixed_in":["2:3.5.10~dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"samba","fixed_in":["2:3.5.10~dfsg-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.5.10~dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.5.10~dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.5.10~dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:5.0","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.2.5-4lenny15"}]}],"versions":["2:3.2.5-4","2:3.2.5-4lenny1","2:3.2.5-4lenny10","2:3.2.5-4lenny11","2:3.2.5-4lenny12","2:3.2.5-4lenny13","2:3.2.5-4lenny14","2:3.2.5-4lenny2","2:3.2.5-4lenny3","2:3.2.5-4lenny4","2:3.2.5-4lenny6","2:3.2.5-4lenny7","2:3.2.5-4lenny8","2:3.2.5-4lenny9"],"bundled":2},{"source":"osv","ecosystem":"Debian:6.0","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.5.6~dfsg-3squeeze5"}]}],"versions":["2:3.5.6~dfsg-3","2:3.5.6~dfsg-3squeeze1","2:3.5.6~dfsg-3squeeze2","2:3.5.6~dfsg-3squeeze3","2:3.5.6~dfsg-3squeeze4"],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-0.34.el4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-0.34.el4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-0.34.el4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"samba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-0.34.el4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-0.34.el4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-0.34.el4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-0.34.el4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-0.34.el4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"samba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-0.34.el4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-0.34.el4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-0.34.el4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-0.34.el4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-0.34.el4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"samba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-0.34.el4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-0.34.el4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-0.34.el4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-0.34.el4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-0.34.el4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"samba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-0.34.el4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-0.34.el4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"libsmbclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-3.29.el5_7.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-3.29.el5_7.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-3.29.el5_7.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-3.29.el5_7.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"samba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-3.29.el5_7.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-3.29.el5_7.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"libsmbclient-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-3.29.el5_7.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-3.29.el5_7.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"samba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-3.29.el5_7.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"libsmbclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-3.29.el5_7.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"libsmbclient-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-3.29.el5_7.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-3.29.el5_7.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-3.29.el5_7.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-3.29.el5_7.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"samba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-3.29.el5_7.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-3.29.el5_7.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"samba3x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.4-0.83.el5_7.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"samba3x-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.4-0.83.el5_7.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"samba3x-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.4-0.83.el5_7.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"samba3x-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.4-0.83.el5_7.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"samba3x-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.4-0.83.el5_7.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"samba3x-domainjoin-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.4-0.83.el5_7.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"samba3x-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.4-0.83.el5_7.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"samba3x-winbind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.4-0.83.el5_7.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"samba3x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.4-0.83.el5_7.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"samba3x-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.4-0.83.el5_7.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"samba3x-winbind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.4-0.83.el5_7.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"samba3x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.4-0.83.el5_7.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"samba3x-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.4-0.83.el5_7.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"samba3x-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.4-0.83.el5_7.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"samba3x-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.4-0.83.el5_7.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"samba3x-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.4-0.83.el5_7.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"samba3x-domainjoin-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.4-0.83.el5_7.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"samba3x-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.4-0.83.el5_7.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"samba3x-winbind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.4-0.83.el5_7.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"samba3x-winbind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.4-0.83.el5_7.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.1-2.el6_1.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"cifs-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.1-2.el6_1.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libsmbclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.6-86.el6_1.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.6-86.el6_1.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.6-86.el6_1.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.6-86.el6_1.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"samba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.6-86.el6_1.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"samba-winbind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.6-86.el6_1.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"samba-winbind-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.6-86.el6_1.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libsmbclient-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.6-86.el6_1.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"samba-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.6-86.el6_1.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"samba-domainjoin-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.6-86.el6_1.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.6-86.el6_1.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"samba-winbind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.6-86.el6_1.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"samba-winbind-krb5-locator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.6-86.el6_1.4"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0-1.1"}]}],"bundled":56}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"samba","product":"samba"}],"references":[{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:121","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","Broken Link","advisory"]},{"url":"http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c03008543","tags":["vendor-advisory","x_refsource_HP","x_transferred","Broken Link","Third Party Advisory","advisory","web"]},{"url":"http://securitytracker.com/id?1025852","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Broken Link","Third Party Advisory","VDB Entry","advisory","web"]},{"url":"http://jvn.jp/en/jp/JVN63041502/index.html","tags":["third-party-advisory","x_refsource_JVN","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.debian.org/security/2011/dsa-2290","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"http://osvdb.org/74072","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","Broken Link","web"]},{"url":"http://secunia.com/advisories/45393","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Not Applicable","Vendor Advisory","advisory"]},{"url":"http://secunia.com/advisories/45496","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Not Applicable","Third Party Advisory","advisory"]},{"url":"http://secunia.com/advisories/45488","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Not Applicable","Third Party Advisory","advisory"]},{"url":"http://samba.org/samba/history/samba-3.5.10.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/48901","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://bugzilla.samba.org/show_bug.cgi?id=8289","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","fix","report"]},{"url":"http://www.samba.org/samba/security/CVE-2011-2694","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"http://ubuntu.com/usn/usn-1182-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/68844","tags":["vdb-entry","x_refsource_XF","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=722537","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","fix","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-2694","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-9xqr-g3w9-82pj"},{"url":"https://security-tracker.debian.org/tracker/CVE-2011-2694","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2011:1219","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=562156","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=577277","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=695925","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=721348","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1219.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-0547","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0547","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0547","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-0787","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0787","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0787","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-1678","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-1678","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-1678","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-2522","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-2522","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-2522","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-2694","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-2694","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-3585","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=742907","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-3585","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-3585","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2011:1220","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=726691","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1220.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-2724","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-2724","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-2724","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2011:1221","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=728517","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1221.json","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1888","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-2813","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-2906","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-2948","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0787","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0926","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1635","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1642","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-6150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0172","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0213","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1863","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4124","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4496","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0239","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3560","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0240","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3223","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5299","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5370","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7560","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2118","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2119","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2011-2694","description":"Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the username parameter to the passwd program (aka the user field to the Change Password page).","status":"published","published":"2011-07-29T20:00:00Z","modified":"2024-08-06T23:08:23.785Z","updated_at":"2026-11-02T14:35:36.252742Z"}],"euvd":[{"id":"EUVD-2011-2675","description":"Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the username parameter to the passwd program (aka the user field to the Change Password page).","status":"published","published":"2011-07-29T20:00:00Z","modified":"2024-08-06T23:08:23Z","updated_at":"2026-11-03T01:39:54.68331Z"}],"ghsa":[{"id":"GHSA-9xqr-g3w9-82pj","title":"Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba...","description":"Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the username parameter to the passwd program (aka the user field to the Change Password page).","status":"published","published":"2022-05-14T02:16:34Z","modified":"2023-02-02T05:05:49Z","cwes":["CWE-79"],"updated_at":"2026-11-02T14:52:11.23915Z"}],"nvd":[{"id":"CVE-2011-2694","description":"Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the username parameter to the passwd program (aka the user field to the Change Password page).","status":"published","published":"2011-07-29T20:55:02.22Z","modified":"2026-06-16T23:31:48.81Z","cvss":[{"version":"2.0","score":2.6,"vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:02:09.182398Z"}],"osv":[{"id":"CVE-2011-2694","description":"Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the username parameter to the passwd program (aka the user field to the Change Password page).","status":"published","published":"2011-07-29T20:55:02Z","modified":"2026-04-10T03:41:51.58403Z","updated_at":"2026-11-02T15:43:58.279353Z"},{"id":"DEBIAN-CVE-2011-2694","description":"Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the username parameter to the passwd program (aka the user field to the Change Password page).","status":"published","published":"2011-07-29T20:55:02.22Z","modified":"2026-10-23T17:47:27.335626893Z","updated_at":"2026-11-02T15:45:24.612044Z"},{"id":"DSA-2290-1","title":"samba - cross-side scripting","status":"published","published":"2011-08-07T00:00:00Z","modified":"2026-03-09T01:18:12.018516Z","updated_at":"2026-11-02T15:46:15.108335Z"},{"id":"openSUSE-SU-2024:10069-1","title":"ctdb-4.5.0-1.1 on GA media","description":"These are all security issues fixed in the ctdb-4.5.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:47:57.807269Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"RHSA-2011:1219","title":"Red Hat Security Advisory: samba security update","status":"published","published":"2024-09-15T19:17:51Z","modified":"2026-06-28T10:05:11Z","updated_at":"2026-11-02T15:53:01.003286Z"},{"id":"RHSA-2011:1220","title":"Red Hat Security Advisory: samba3x security update","status":"published","published":"2024-09-15T19:17:57Z","modified":"2026-06-28T10:05:11Z","updated_at":"2026-11-02T15:53:01.003286Z"},{"id":"RHSA-2011:1221","title":"Red Hat Security Advisory: samba and cifs-utils security and bug fix update","status":"published","published":"2024-09-15T19:18:02Z","modified":"2026-06-28T10:05:12Z","updated_at":"2026-11-02T15:53:01.003286Z"}]}}