2017-10-16 12:31:07 -04:00
{
"CVE_data_meta" : {
"ASSIGNER" : "cve@mitre.org" ,
"ID" : "CVE-2011-2522" ,
"STATE" : "PUBLIC"
} ,
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "n/a" ,
"version" : {
"version_data" : [
{
"version_value" : "n/a"
}
]
}
}
]
} ,
"vendor_name" : "n/a"
}
]
}
} ,
"data_format" : "MITRE" ,
"data_type" : "CVE" ,
"data_version" : "4.0" ,
"description" : {
"description_data" : [
{
"lang" : "eng" ,
"value" : "Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that (1) shut down daemons, (2) start daemons, (3) add shares, (4) remove shares, (5) add printers, (6) remove printers, (7) add user accounts, or (8) remove user accounts, as demonstrated by certain start, stop, and restart parameters to the status program."
}
]
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "n/a"
}
]
}
]
} ,
"references" : {
"reference_data" : [
{
2018-04-05 09:33:01 -04:00
"name" : "17577" ,
"refsource" : "EXPLOIT-DB" ,
2017-10-16 12:31:07 -04:00
"url" : "http://www.exploit-db.com/exploits/17577"
} ,
{
2018-04-05 09:33:01 -04:00
"name" : "http://samba.org/samba/history/samba-3.5.10.html" ,
"refsource" : "CONFIRM" ,
2017-10-16 12:31:07 -04:00
"url" : "http://samba.org/samba/history/samba-3.5.10.html"
} ,
{
2018-04-05 09:33:01 -04:00
"name" : "http://www.samba.org/samba/security/CVE-2011-2522" ,
"refsource" : "CONFIRM" ,
2017-10-16 12:31:07 -04:00
"url" : "http://www.samba.org/samba/security/CVE-2011-2522"
} ,
{
2018-04-05 09:33:01 -04:00
"name" : "https://bugzilla.redhat.com/show_bug.cgi?id=721348" ,
"refsource" : "CONFIRM" ,
2017-10-16 12:31:07 -04:00
"url" : "https://bugzilla.redhat.com/show_bug.cgi?id=721348"
} ,
{
2018-04-05 09:33:01 -04:00
"name" : "https://bugzilla.samba.org/show_bug.cgi?id=8290" ,
"refsource" : "CONFIRM" ,
2017-10-16 12:31:07 -04:00
"url" : "https://bugzilla.samba.org/show_bug.cgi?id=8290"
} ,
{
2018-04-05 09:33:01 -04:00
"name" : "DSA-2290" ,
"refsource" : "DEBIAN" ,
2017-10-16 12:31:07 -04:00
"url" : "http://www.debian.org/security/2011/dsa-2290"
} ,
{
2018-04-05 09:33:01 -04:00
"name" : "HPSBNS02701" ,
"refsource" : "HP" ,
2017-10-16 12:31:07 -04:00
"url" : "http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c03008543"
} ,
{
2018-04-05 09:33:01 -04:00
"name" : "SSRT100598" ,
"refsource" : "HP" ,
2017-10-16 12:31:07 -04:00
"url" : "http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c03008543"
} ,
2017-12-12 13:03:57 -05:00
{
2018-04-05 09:33:01 -04:00
"name" : "HPSBUX02768" ,
"refsource" : "HP" ,
2017-12-12 13:03:57 -05:00
"url" : "http://marc.info/?l=bugtraq&m=133527864025056&w=2"
} ,
{
2018-04-05 09:33:01 -04:00
"name" : "SSRT100664" ,
"refsource" : "HP" ,
2017-12-12 13:03:57 -05:00
"url" : "http://marc.info/?l=bugtraq&m=133527864025056&w=2"
} ,
2017-10-16 12:31:07 -04:00
{
2018-04-05 09:33:01 -04:00
"name" : "MDVSA-2011:121" ,
"refsource" : "MANDRIVA" ,
2017-10-16 12:31:07 -04:00
"url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:121"
} ,
{
2018-04-05 09:33:01 -04:00
"name" : "USN-1182-1" ,
"refsource" : "UBUNTU" ,
2017-10-16 12:31:07 -04:00
"url" : "http://ubuntu.com/usn/usn-1182-1"
} ,
{
2018-04-05 09:33:01 -04:00
"name" : "JVN#29529126" ,
"refsource" : "JVN" ,
2017-10-16 12:31:07 -04:00
"url" : "http://jvn.jp/en/jp/JVN29529126/index.html"
} ,
{
2018-04-05 09:33:01 -04:00
"name" : "48899" ,
"refsource" : "BID" ,
2017-10-16 12:31:07 -04:00
"url" : "http://www.securityfocus.com/bid/48899"
} ,
{
2018-04-05 09:33:01 -04:00
"name" : "74071" ,
"refsource" : "OSVDB" ,
2017-10-16 12:31:07 -04:00
"url" : "http://osvdb.org/74071"
} ,
{
2018-04-05 09:33:01 -04:00
"name" : "1025852" ,
"refsource" : "SECTRACK" ,
2017-10-16 12:31:07 -04:00
"url" : "http://securitytracker.com/id?1025852"
} ,
{
2018-04-05 09:33:01 -04:00
"name" : "45393" ,
"refsource" : "SECUNIA" ,
2017-10-16 12:31:07 -04:00
"url" : "http://secunia.com/advisories/45393"
} ,
{
2018-04-05 09:33:01 -04:00
"name" : "45488" ,
"refsource" : "SECUNIA" ,
2017-10-16 12:31:07 -04:00
"url" : "http://secunia.com/advisories/45488"
} ,
{
2018-04-05 09:33:01 -04:00
"name" : "45496" ,
"refsource" : "SECUNIA" ,
2017-10-16 12:31:07 -04:00
"url" : "http://secunia.com/advisories/45496"
} ,
{
2018-04-05 09:33:01 -04:00
"name" : "8317" ,
"refsource" : "SREASON" ,
2017-10-16 12:31:07 -04:00
"url" : "http://securityreason.com/securityalert/8317"
} ,
{
2018-04-05 09:33:01 -04:00
"name" : "samba-swat-csrf(68843)" ,
"refsource" : "XF" ,
2017-10-16 12:31:07 -04:00
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/68843"
}
]
}
}