CVE-2011-2522 json
Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allow rem…
published 2011-07-29 15 y ago modified 2026-06-16 4 mo ago also EUVD-2011-2507
- cvss
- 6.8
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 10.6%
- EPSS 10.6% chance of exploitation in 30 days, percentile 95%
- public exploits
- 1
- Exploit-DB
Summary
Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that (1) shut down daemons, (2) start daemons, (3) add shares, (4) remove shares, (5) add printers, (6) remove printers, (7) add user accounts, or (8) remove user accounts, as demonstrated by certain start, stop, and restart parameters to the status program.
Patch / fix
- samba samba 3.3.16, 3.4.14, 3.5.10
- samba Debian 14, Debian 13, Debian 12 2:3.5.10~dfsg-1
debian advisories DEBIAN-CVE-2011-2522
- samba RHEL 6 3.5.6-86.el6_1.4
- cifs-utils RHEL 6 4.8.1-2.el6_1.2
- samba-swat RHEL 6 3.5.6-86.el6_1.4
- libsmbclient RHEL 6 3.5.6-86.el6_1.4
- samba-client RHEL 6 3.5.6-86.el6_1.4
- samba-common RHEL 6 3.5.6-86.el6_1.4
- samba-winbind RHEL 6 3.5.6-86.el6_1.4
- samba-domainjoin-gui RHEL 6 3.5.6-86.el6_1.4
red hat advisories RHSA-2011:1221RHSA-2011:1220RHSA-2011:1219
- samba openSUSE Tumbleweed 4.5.0-1.1
opensuse advisories openSUSE-SU-2024:10069-1
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2011-2522 updated cvss 4.3
(SWAT): Absent CSRF protection in various Samba web configuration formulars
-
Red Hat Enterprise Linux (v. 5 server) samba 3.0.33-3.29.el5_7.4, samba3x 3.5.4-0.83.el5_7.2, samba-swat 3.0.33-3.29.el5_7.4, samba3x-swat 3.5.4-0.83.el5_7.2, libsmbclient 3.0.33-3.29.el5_7.4, samba-client 3.0.33-3.29.el5_7.4, +5 more Red Hat Enterprise Linux AS version 4 samba 3.0.33-0.34.el4, samba-swat 3.0.33-0.34.el4, samba-client 3.0.33-0.34.el4, samba-common 3.0.33-0.34.el4 Red Hat Enterprise Linux Desktop (v. 5 client) samba 3.0.33-3.29.el5_7.4, samba3x 3.5.4-0.83.el5_7.2, samba-swat 3.0.33-3.29.el5_7.4, samba3x-swat 3.5.4-0.83.el5_7.2, libsmbclient 3.0.33-3.29.el5_7.4, samba-client 3.0.33-3.29.el5_7.4, +5 more Red Hat Enterprise Linux Desktop version 4 samba 3.0.33-0.34.el4, samba-swat 3.0.33-0.34.el4, samba-client 3.0.33-0.34.el4, samba-common 3.0.33-0.34.el4 Red Hat Enterprise Linux ES version 4 samba 3.0.33-0.34.el4, samba-swat 3.0.33-0.34.el4, samba-client 3.0.33-0.34.el4, samba-common 3.0.33-0.34.el4fixed: vendor fix RHSA-2011:1219
-
Red Hat Enterprise Linux Server (v. 6) samba 3.5.6-86.el6_1.4, cifs-utils 4.8.1-2.el6_1.2, libsmbclient 3.5.6-86.el6_1.4, samba-client 3.5.6-86.el6_1.4, samba-common 3.5.6-86.el6_1.4, samba-winbind 3.5.6-86.el6_1.4, +1 more Red Hat Enterprise Linux Server Optional (v. 6) samba 3.5.6-86.el6_1.4, samba-swat 3.5.6-86.el6_1.4, samba-domainjoin-gui 3.5.6-86.el6_1.4, samba-winbind-krb5-locator 3.5.6-86.el6_1.4fixed: vendor fix RHSA-2011:1221
-
Red Hat Enterprise Linux WS version 4 samba 3.0.33-0.34.el4, samba-swat 3.0.33-0.34.el4, samba-client 3.0.33-0.34.el4, samba-common 3.0.33-0.34.el4 Red Hat RHEL Desktop Workstation (v. 5 client) samba 3.0.33-3.29.el5_7.4, samba3x 3.5.4-0.83.el5_7.2fixed: vendor fix RHSA-2011:1219
-
Red Hat Enterprise Linux 6 samba4, samba4-dc, samba4-libs, samba4-pidl, samba4-swat, samba4-test, +7 morenot affected: vulnerable code not present
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Timeline
- First public exploit (EDB-17577)
- Published
Exploit prediction
10.62% chance of exploitation in the next 30 days, higher than 95% of all scored CVEs (FIRST EPSS, 2026-11-09).
Exploits and checks
- EDB-17577 SWAT Samba Web Administration Tool - Cross-Site Request Forgery webapps, 2011-07-27
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 6.8 | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Classification
- Weakness
-
- CWE-352 Cross-Site Request Forgery
References
-
bugzilla.samba.org
/show_bug.cgi?id=8290
issue-tracking, patch, third-party-advisory
-
bugzilla.redhat.com
/show_bug.cgi?id=721348
issue-tracking, patch, third-party-advisory
-
exploit-db.com
/exploits/17577
exploit, third-party-advisory, vdb-entry
-
mandriva.com
/security/advisories?name=MDVSA-2011:121
vendor-advisory, broken-link
-
itrc.hp.com
/service/cki/docDisplay.do?docId=emr_na-c03008543
vendor-advisory, broken-link
-
marc.info
/?l=bugtraq&m=133527864025056&w=2
vendor-advisory, mailing-list, third-party-advisory
-
debian.org
/security/2011/dsa-2290
vendor-advisory, third-party-advisory
-
ubuntu.com
/usn/usn-1182-1
vendor-advisory, third-party-advisory
-
samba.org
/samba/security/CVE-2011-2522
vendor-advisory
-
samba.org
/samba/history/samba-3.5.10.html
vendor-advisory
-
osvdb.org
/74071
vdb-entry, broken-link
-
securitytracker.com
/id?1025852
vdb-entry, third-party-advisory
-
secunia.com
/advisories/45393
third-party-advisory
-
secunia.com
/advisories/45496
third-party-advisory
-
secunia.com
/advisories/45488
third-party-advisory
-
securityreason.com
/securityalert/8317
third-party-advisory
-
jvn.jp
/en/jp/JVN29529126/index.html
third-party-advisory
-
securityfocus.com
/bid/48899
vdb-entry, third-party-advisory
-
exchange.xforce.ibmcloud.com
/vulnerabilities/68843
vdb-entry, third-party-advisory
Sources
- CVE List CVE-2011-2522
- NVD CVE-2011-2522
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.