Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2011-2694
Description:Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the username parameter to the passwd program (aka the user field to the Change Password page).
Test IDs: 1.3.6.1.4.1.25623.1.0.70080   1.3.6.1.4.1.25623.1.0.70130   1.3.6.1.4.1.25623.1.0.70081   1.3.6.1.4.1.25623.1.0.70262   1.3.6.1.4.1.25623.1.0.70131   1.3.6.1.4.1.25623.1.0.70082   1.3.6.1.4.1.25623.1.0.881274   1.3.6.1.4.1.25623.1.0.870708   1.3.6.1.4.1.25623.1.0.880981   1.3.6.1.4.1.25623.1.0.880969   1.3.6.1.4.1.25623.1.0.881285   1.3.6.1.4.1.25623.1.0.881388   1.3.6.1.4.1.25623.1.0.870475   1.3.6.1.4.1.25623.1.0.880985   1.3.6.1.4.1.25623.1.0.870477  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2011-2694
BugTraq ID: 48901
http://www.securityfocus.com/bid/48901
Debian Security Information: DSA-2290 (Google Search)
http://www.debian.org/security/2011/dsa-2290
HPdes Security Advisory: HPSBNS02701
http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c03008543
HPdes Security Advisory: SSRT100598
http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c03008543
http://jvn.jp/en/jp/JVN63041502/index.html
http://www.mandriva.com/security/advisories?name=MDVSA-2011:121
http://osvdb.org/74072
http://securitytracker.com/id?1025852
http://secunia.com/advisories/45393
http://secunia.com/advisories/45488
http://secunia.com/advisories/45496
http://ubuntu.com/usn/usn-1182-1
XForce ISS Database: samba-user-xss(68844)
https://exchange.xforce.ibmcloud.com/vulnerabilities/68844




© 1998-2021 E-Soft Inc. All rights reserved.