CVE-2011-2522

CVE-2011-2522 describes CSRF in the Samba Web Administration Tool (SWAT) affecting Samba 3.x before 3.5.10, enabling remote attackers to perform configuration changes (e.g., starting/stopping services, adding/removing shares or users) via crafted SWAT requests. Connected advisories confirm SWAT C...

CVE-2011-2694

Cross-site scripting XSS vulnerability in the chgpasswd function in web/swat.c in the Samba Web Administration Tool SWAT in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the username parameter to the passwd program aka the user field...

CVE-2011-2694

Cross-site scripting XSS vulnerability in the chgpasswd function in web/swat.c in the Samba Web Administration Tool SWAT in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the username parameter to the passwd program aka the user field...

Samba 3.x < 3.3.16 / 3.4.14 / 3.5.10 Multiple Vulnerabilities

According to its banner, the version of Samba 3.x running on the remote host is earlier than 3.3.16 / 3.4.14 / 3.5.10. As such, it is potentially affected by several vulnerabilities in the Samba Web Administration Tool SWAT : - A cross-site scripting vulnerability exists because of a failure to...

Mandriva Linux Security Advisory : samba (MDVSA-2011:121)

Multiple vulnerabilities has been discovered and corrected in samba : All current released versions of Samba are vulnerable to a cross-site request forgery in the Samba Web Administration Tool SWAT. By tricking a user who is authenticated with SWAT into clicking a manipulated URL on a different w...

SWAT Samba Web Administration Tool Cross-Site Request Forgery PoC

No description provided by source. !-- Secur-I Research Group - Proof-of-Concept ========================================================================== Title: Cross-Site Request Forgery in SWAT Samba Web Administration Tool Vulnerable versions: Samba 3.0.x - 3.5.9 inclusive Fixed version: Sam...

CVE-2011-2522

Multiple cross-site request forgery CSRF vulnerabilities in the Samba Web Administration Tool SWAT in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that 1 shut down daemons, 2 start daemons, 3 add shares, 4 remove shares, 5 add printers...

SWAT Samba Web Administration Tool Cross-Site Request Forgery PoC

Exploit for cgi platform in category web applications Thanks & Regards, Narendra. Confidentiality: This e-mail and any attachments may be confidential and may also be privileged. If you are not an intended named recipient, please notify the sender immediately and do not disclose the contents to...

Samba -- cross site scripting and request forgery vulnerabilities

Samba security advisory reports: All current released versions of Samba are vulnerable to a cross-site request forgery in the Samba Web Administration Tool SWAT. By tricking a user who is authenticated with SWAT into clicking a manipulated URL on a different web page, it is possible to manipulate...

Cross-Site Request Forgery in SWAT

Description All current released versions of Samba are vulnerable to a cross-site request forgery in the Samba Web Administration Tool SWAT. By tricking a user who is authenticated with SWAT into clicking a manipulated URL on a different web page, it is possible to manipulate SWAT. In order to be...

Cross-Site Scripting vulnerability in SWAT

Description All current released versions of Samba are vulnerable to a cross-site scripting issue in the Samba Web Administration Tool SWAT. On the "Change Password" field, it is possible to insert arbitrary content into the "user" field. This issue is only exploitable if CVE-2011-2522 has not be...

libsmbclient, samba security update

CentOS Errata and Security Advisory CESA-2010:0697 Updated samba packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 3, 4, and 5, and Red Hat Enterprise Linux 4.7, 5.3, and 5.4 Extended Update Support. The Red Hat Security Response Team has rated this...

CentOS Security Advisory CESA-2009:1528 (samba)

The remote host is missing updates to samba announced in advisory CESA-2009:1528. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-onl...

Samba SWAT HTTP Authentication Buffer Overflow (CVE-2004-0600)

Samba is an open-source implementation of the file, print, and other network services suite known as SMB/CIFS Server Message Block/Common Internet File System. SWAT is a web-based administrative tool that allows an administrator to edit and view a Samba configuration. SWAT commonly listens on por...

FreeBSD : Multiple Potential Buffer Overruns in Samba (2de14f7a-dad9-11d8-b59a-00061bc2ad93)

Evgeny Demidov discovered that the Samba server has a buffer overflow in the Samba Web Administration Tool SWAT on decoding Base64 data during HTTP Basic Authentication. Versions 3.0.2 through 3.0.4 are affected. Another buffer overflow bug has been found in the code used to support the 'mangling...

Mandriva Update for samba MDKA-2007:001 (samba)

Check for the Version of samba OpenVAS Vulnerability Test Mandriva Update for samba MDKA-2007:001 samba Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CVE-2008-3286

SWAT 4 1.1 and earlier allows remote attackers to cause a denial of service daemon crash via a 1 VERIFYCONTENT or 2 GAMECONFIG command sent to the server before user session initialization, which triggers a NULL pointer dereference; or 3 a GAMESPYRESPONSE command followed by a long RS string...

Null pointer dereference

SWAT 4 1.1 and earlier allows remote attackers to cause a denial of service daemon crash via a 1 VERIFYCONTENT or 2 GAMECONFIG command sent to the server before user session initialization, which triggers a NULL pointer dereference; or 3 a GAMESPYRESPONSE command followed by a long RS string...

CVE-2008-3286

CVE-2008-3286 affects SWAT 4 (version 1.1 and earlier). The issue is a remote denial of service caused by specific commands (VERIFYCONTENT, GAMECONFIG) sent to the server before user session initialization, triggering a NULL pointer dereference, or by a GAMESPYRESPONSE command followed by a long ...

CVE-2008-3286

SWAT 4 1.1 and earlier allows remote attackers to cause a denial of service daemon crash via a 1 VERIFYCONTENT or 2 GAMECONFIG command sent to the server before user session initialization, which triggers a NULL pointer dereference; or 3 a GAMESPYRESPONSE command followed by a long RS string...