Slackware: Security Advisory (SSA:2004-207-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Hacker wanted by FBI held in India For Carding Crimes

Nikhil Kolbekar, aka HellsAngel, was arrested on July 11 in Mumbai, India. Eric Bogle, known as Swat Runs Train, and Justin Mills, or xTGxKAKAROT, were taken into custody in Canada, respectively Colorado, US. HellsAngel and Bogle is suspected of selling complete credit card details, including...

Samba 3.x < 3.5.21 / 3.6.12 and 4.x < 4.0.2 SWAT Multiple Vulnerabilities (deprecated)

Binary data 6686.prm...

CentOS 5 : samba3x (CESA-2011:1220)

Updated samba3x packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

FreeBSD Ports: samba34

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

SuSE9 Security Update : Samba (YOU Patch Number 12812)

A cross-site request forgery CSRF and a cross-site scripting vulnerability have been fixed in samba's SWAT. - CVSS v2 Base Score: 3.5 AV:N/AC:M/Au:S/C:N/I:P/A:N. CVE-2011-2522 - CVSS v2 Base Score: 3.5 AV:N/AC:M/Au:S/C:N/I:P/A:N. CVE-2011-2694 %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

RHEL 4 / 5 : samba (RHSA-2011:1219)

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1219 advisory. - samba: mount.cifs improper device name and mountpoint strings sanitization CVE-2010-0547 - samba: Race condition by mount mount.cifs...

RHEL 6 : samba and cifs-utils (RHSA-2011:1221)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1221 advisory. Samba is a suite of programs used by machines to share files, printers, and other information. The cifs-utils package contains utilities for...

(SWAT): Absent CSRF protection in various Samba web configuration formulars

Multiple cross-site request forgery CSRF vulnerabilities in the Samba Web Administration Tool SWAT in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that 1 shut down daemons, 2 start daemons, 3 add shares, 4 remove shares, 5 add printers...

Moderate: Red Hat Security Advisory: samba security update

Updated samba packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings,...

JVN#63041502: Samba Web Administration Tool vulnerable to cross-site scripting

Samba Web Administration Tool SWAT allows for Samba configuration through a web interface. SWAT contains a cross-site scripting vulnerability. SWAT is disabled in a default configuration of Samba. Impact An arbitrary script may be executed on the web browser of a user that is logged into SWAT...

FreeBSD : Samba -- XSS and request forgery vulnerabilities (56f4b3a6-c82c-11e0-a498-00215c6a37bb)

Samba security advisory reports : All current released versions of Samba are vulnerable to a cross-site request forgery in the Samba Web Administration Tool SWAT. By tricking a user who is authenticated with SWAT into clicking a manipulated URL on a different web page, it is possible to manipulat...

Ubuntu Update for samba USN-1182-1

Ubuntu Update for Linux kernel vulnerabilities USN-1182-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11821.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for samba USN-1182-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...

[SECURITY] [DSA 2290-1] samba security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2290-1 [email protected] http://www.debian.org/security/ Florian Weimer August 07, 2011 http://www.debian.org/security/faq -...

DSA-2290-1 samba - cross-side scripting

Bulletin has no description...

USN-1182-1: Samba vulnerabilities

Yoshihiro Ishikawa discovered that the Samba Web Administration Tool SWAT was vulnerable to cross-site request forgeries CSRF. If a Samba administrator were tricked into clicking a link on a specially crafted web page, an attacker could trigger commands that could modify the Samba configuration...

Mandriva Update for samba MDVSA-2011:121 (samba)

Check for the Version of samba OpenVAS Vulnerability Test Mandriva Update for samba MDVSA-2011:121 samba Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Update for samba MDVSA-2011:121 (samba)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

DEBIAN-CVE-2011-2522

Multiple cross-site request forgery CSRF vulnerabilities in the Samba Web Administration Tool SWAT in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that 1 shut down daemons, 2 start daemons, 3 add shares, 4 remove shares, 5 add printers...

CVE-2011-2694

Samba SWAT XSS (CVE-2011-2694) exists in web/swat.c for Samba 3.x before 3.5.10. The vulnerability allows a remote authenticated administrator to inject arbitrary web script/HTML via the username parameter on the Change Password page. Impact is client-side script execution within the SWAT interfa...