Skip to content
OpenAdvisories
Unscored RHSA-2011:1220 4 CVEs

Red Hat Security Advisory: samba3x security update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 20

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client samba3x 0:3.5.4-0.83.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::client samba3x-client 0:3.5.4-0.83.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::client samba3x-common 0:3.5.4-0.83.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::client samba3x-debuginfo 0:3.5.4-0.83.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::client samba3x-doc 0:3.5.4-0.83.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::client samba3x-domainjoin-gui 0:3.5.4-0.83.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::client samba3x-swat 0:3.5.4-0.83.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::client samba3x-winbind 0:3.5.4-0.83.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::client_workstation samba3x 0:3.5.4-0.83.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::client_workstation samba3x-debuginfo 0:3.5.4-0.83.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::client_workstation samba3x-winbind-devel 0:3.5.4-0.83.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::server samba3x 0:3.5.4-0.83.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::server samba3x-client 0:3.5.4-0.83.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::server samba3x-common 0:3.5.4-0.83.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::server samba3x-debuginfo 0:3.5.4-0.83.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::server samba3x-doc 0:3.5.4-0.83.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::server samba3x-domainjoin-gui 0:3.5.4-0.83.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::server samba3x-swat 0:3.5.4-0.83.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::server samba3x-winbind 0:3.5.4-0.83.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::server samba3x-winbind-devel 0:3.5.4-0.83.el5_7.2

Vulnerabilities 4

  • Unscored —
    CVE-2011-1678

    smbfs in Samba 3.5.8 and earlier attempts to use (1) mount.cifs to append to the /etc/mtab file and (2) umount.cifs to …

    samba cifs-utils Debian
  • Unscored —
    CVE-2011-2522 Public exploit EPSS 11%

    Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x bef…

    samba Debian
  • Unscored —
    CVE-2011-2694

    Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba Web Administration Tool …

    samba Debian
  • Unscored —
    CVE-2011-2724

    The check_mtab function in client/mount.cifs.c in mount.cifs in smbfs in Samba 3.5.10 and earlier does not properly ver…

    samba cifs-utils Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=695925
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=721348
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=722537
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=726691
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1220.json
  • report
    https://access.redhat.com/security/cve/CVE-2011-1678
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1678
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1678
  • report
    https://access.redhat.com/security/cve/CVE-2011-2522
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-2522
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-2522
  • report
    https://access.redhat.com/security/cve/CVE-2011-2694
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-2694
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-2694
  • report
    https://access.redhat.com/security/cve/CVE-2011-2724
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-2724
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-2724