Skip to content
OpenAdvisories
Unscored DSA-2290-1 2 CVEs

samba - cross-side scripting

Published Aug 7, 2011 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 5.0 samba 2:3.2.5-4lenny15
Debian · 6.0 samba 2:3.5.6~dfsg-3squeeze5

Vulnerabilities 2

  • Unscored —
    CVE-2011-2522 Public exploit EPSS 11%

    Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x bef…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba Web Administration Tool …