Skip to content
OpenAdvisories
Unscored RHSA-2011:1219 6 CVEs

Red Hat Security Advisory: samba security update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 36

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as samba 0:3.0.33-0.34.el4
Red Hat · RHEL 4 enterprise_linux:4::as samba-client 0:3.0.33-0.34.el4
Red Hat · RHEL 4 enterprise_linux:4::as samba-common 0:3.0.33-0.34.el4
Red Hat · RHEL 4 enterprise_linux:4::as samba-debuginfo 0:3.0.33-0.34.el4
Red Hat · RHEL 4 enterprise_linux:4::as samba-swat 0:3.0.33-0.34.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop samba 0:3.0.33-0.34.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop samba-client 0:3.0.33-0.34.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop samba-common 0:3.0.33-0.34.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop samba-debuginfo 0:3.0.33-0.34.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop samba-swat 0:3.0.33-0.34.el4
Red Hat · RHEL 4 enterprise_linux:4::es samba 0:3.0.33-0.34.el4
Red Hat · RHEL 4 enterprise_linux:4::es samba-client 0:3.0.33-0.34.el4
Red Hat · RHEL 4 enterprise_linux:4::es samba-common 0:3.0.33-0.34.el4
Red Hat · RHEL 4 enterprise_linux:4::es samba-debuginfo 0:3.0.33-0.34.el4
Red Hat · RHEL 4 enterprise_linux:4::es samba-swat 0:3.0.33-0.34.el4
Red Hat · RHEL 4 enterprise_linux:4::ws samba 0:3.0.33-0.34.el4
Red Hat · RHEL 4 enterprise_linux:4::ws samba-client 0:3.0.33-0.34.el4
Red Hat · RHEL 4 enterprise_linux:4::ws samba-common 0:3.0.33-0.34.el4
Red Hat · RHEL 4 enterprise_linux:4::ws samba-debuginfo 0:3.0.33-0.34.el4
Red Hat · RHEL 4 enterprise_linux:4::ws samba-swat 0:3.0.33-0.34.el4
Red Hat · RHEL 5 enterprise_linux:5::client libsmbclient 0:3.0.33-3.29.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::client samba 0:3.0.33-3.29.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::client samba-client 0:3.0.33-3.29.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::client samba-common 0:3.0.33-3.29.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::client samba-debuginfo 0:3.0.33-3.29.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::client samba-swat 0:3.0.33-3.29.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation libsmbclient-devel 0:3.0.33-3.29.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation samba 0:3.0.33-3.29.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation samba-debuginfo 0:3.0.33-3.29.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::server libsmbclient 0:3.0.33-3.29.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::server libsmbclient-devel 0:3.0.33-3.29.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::server samba 0:3.0.33-3.29.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::server samba-client 0:3.0.33-3.29.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::server samba-common 0:3.0.33-3.29.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::server samba-debuginfo 0:3.0.33-3.29.el5_7.4
Red Hat · RHEL 5 enterprise_linux:5::server samba-swat 0:3.0.33-3.29.el5_7.4

Vulnerabilities 6

  • Unscored —
    CVE-2010-0547

    client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) …

    samba Debian
  • Unscored —
    CVE-2010-0787

    client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users …

    samba Debian
  • Unscored —
    CVE-2011-1678

    smbfs in Samba 3.5.8 and earlier attempts to use (1) mount.cifs to append to the /etc/mtab file and (2) umount.cifs to …

    samba cifs-utils Debian
  • Unscored —
    CVE-2011-2522 Public exploit EPSS 11%

    Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x bef…

    samba Debian
  • Unscored —
    CVE-2011-2694

    Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba Web Administration Tool …

    samba Debian
  • Unscored —
    CVE-2011-3585

    Multiple race conditions in the (1) mount.cifs and (2) umount.cifs programs in Samba 3.6 allow local users to cause a d…

    Samba Samba samba cifs-utils Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=562156
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=577277
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=695925
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=721348
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=722537
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1219.json
  • report
    https://access.redhat.com/security/cve/CVE-2010-0547
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-0547
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-0547
  • report
    https://access.redhat.com/security/cve/CVE-2010-0787
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-0787
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-0787
  • report
    https://access.redhat.com/security/cve/CVE-2011-1678
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1678
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1678
  • report
    https://access.redhat.com/security/cve/CVE-2011-2522
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-2522
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-2522
  • report
    https://access.redhat.com/security/cve/CVE-2011-2694
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-2694
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-2694
  • report
    https://access.redhat.com/security/cve/CVE-2011-3585
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=742907
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-3585
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-3585