Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-2694
HistoryJul 28, 2011 - 12:00 a.m.

CVE-2011-2694

2011-07-2800:00:00
ubuntu.com
ubuntu.com
13

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

65.8%

Cross-site scripting (XSS) vulnerability in the chg_passwd function in
web/swat.c in the Samba Web Administration Tool (SWAT) in Samba 3.x before
3.5.10 allows remote authenticated administrators to inject arbitrary web
script or HTML via the username parameter to the passwd program (aka the
user field to the Change Password page).

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchsamba< 3.0.28a-1ubuntu4.15UNKNOWN
ubuntu10.04noarchsamba< 2:3.4.7~dfsg-1ubuntu3.7UNKNOWN
ubuntu10.10noarchsamba< 2:3.5.4~dfsg-1ubuntu8.5UNKNOWN
ubuntu11.04noarchsamba< 2:3.5.8~dfsg-1ubuntu2.3UNKNOWN

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

65.8%