Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-2694
HistoryJul 28, 2011 - 12:00 a.m.

CVE-2011-2694

2011-07-2800:00:00
ubuntu.com
ubuntu.com
22

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

EPSS

0.003

Percentile

66.3%

Cross-site scripting (XSS) vulnerability in the chg_passwd function in
web/swat.c in the Samba Web Administration Tool (SWAT) in Samba 3.x before
3.5.10 allows remote authenticated administrators to inject arbitrary web
script or HTML via the username parameter to the passwd program (aka the
user field to the Change Password page).

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchsamba< 3.0.28a-1ubuntu4.15UNKNOWN
ubuntu10.04noarchsamba< 2:3.4.7~dfsg-1ubuntu3.7UNKNOWN
ubuntu10.10noarchsamba< 2:3.5.4~dfsg-1ubuntu8.5UNKNOWN
ubuntu11.04noarchsamba< 2:3.5.8~dfsg-1ubuntu2.3UNKNOWN

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

EPSS

0.003

Percentile

66.3%