Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the username parameter to the passwd program (aka the user field to the Change Password page).
CVSS Details
- CVSS 3.1 Base Score: 4.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade samba3x-winbind-develUpgrade samba3x-swatUpgrade samba3x-winbindUpgrade samba-swatUpgrade sambaUpgrade libsmbclient-develUpgrade samba3x-commonUpgrade samba3x-domainjoin-guiUpgrade libsmbclientUpgrade samba-commonUpgrade samba-clientUpgrade samba3x-clientUpgrade samba3x-docUpgrade samba3x | Dec 1, 2016 | Jul 29, 2011 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Jul 29, 2011 |
| Freebsd | — | Upgrade samba34Upgrade samba35 | Dec 10, 2025 | Aug 16, 2011 |
| Oracle_linux | — | Upgrade samba-winbindUpgrade samba-winbind-krb5-locatorUpgrade cifs-utilsUpgrade samba-swatUpgrade samba-docUpgrade libsmbclientUpgrade sambaUpgrade samba3x-clientUpgrade samba-winbind-develUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-domainjoin-guiUpgrade samba3xUpgrade samba3x-winbindUpgrade samba3x-winbind-develUpgrade samba3x-domainjoin-guiUpgrade samba-commonUpgrade samba3x-swatUpgrade samba3x-docUpgrade libsmbclient-develUpgrade samba3x-common | Oct 16, 2024 | Jul 29, 2011 |
| Samba | — | Upgrade to Samba version 3.5.10Upgrade to Samba version 3.4.14Upgrade to Samba version 3.3.16 | Nov 13, 2013 | Jul 29, 2011 |
| Suse | — | Upgrade libdcerpc-samr0Upgrade libsmbconf0-32bitUpgrade libsmbconf-develUpgrade libdcerpc-atsvc-develUpgrade libtevent-util0-32bitUpgrade samba-ad-dcUpgrade samba-winbindUpgrade samba-winbind-libsUpgrade libwbclient-develUpgrade libwbclient0-x86Upgrade libsmbclient-raw0-32bitUpgrade libndr0-32bitUpgrade samba-toolUpgrade libldb1Upgrade libsmbsharemodes-develUpgrade samba-x86Upgrade libsmbclient0Upgrade samba-test-develUpgrade samba-libs-python3-32bitUpgrade libsamba-hostconfig-develUpgrade libdcerpc0Upgrade libtdb1-32bitUpgrade samba-krb-printingUpgrade samba-ldb-ldapUpgrade libsmbclient0-32bitUpgrade libsmbclient-raw0Upgrade libsmbconf0Upgrade libldb-develUpgrade samba-clientUpgrade libsmbldap2Upgrade libsamba-credentials0-32bitUpgrade libdcerpc-binding0Upgrade samba-core-develUpgrade libsmbldap-develUpgrade libregistry0Upgrade ctdb-pcp-pmdaUpgrade libwbclient0-32bitUpgrade samba-client-langUpgrade libdcerpc-atsvc0Upgrade libsamdb0Upgrade libsamba-errors0Upgrade libndr-nbt0-32bitUpgrade libgensec0Upgrade libsmbldap0Upgrade python3-ldbUpgrade libndr0Upgrade libsamba-credentials-develUpgrade libsamba-passdb0Upgrade libtdb-develUpgrade libdcerpc-binding0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libnetapi0-32bitUpgrade samba-ad-dc-libsUpgrade libndr-develUpgrade libsamba-passdb0-32bitUpgrade libsamba-util0Upgrade libtdb1Upgrade samba-gpupdateUpgrade libnetapi-develUpgrade libsamdb0-32bitUpgrade samba-python3Upgrade libsamba-errors-develUpgrade libndr-krb5pac-develUpgrade samba-dcerpcUpgrade libndr-krb5pac0Upgrade samba-libs-32bitUpgrade samba-libs-python3Upgrade samba-testUpgrade samba-docUpgrade samba-winbind-32bitUpgrade libtalloc2Upgrade libregistry-develUpgrade libtalloc2-x86Upgrade samba-client-32bitUpgrade samba-pythonUpgrade libtalloc-develUpgrade libndr-krb5pac0-32bitUpgrade samba-kdcUpgrade samba-winbind-libs-langUpgrade samba-client-x86Upgrade libsamba-errors0-32bitUpgrade samba-32bitUpgrade libgensec0-32bitUpgrade libpdb0-32bitUpgrade libsamba-policy0Upgrade libsamba-credentials0Upgrade libsmbldap2-32bitUpgrade ldb-toolsUpgrade libnetapi0Upgrade libndr-nbt0Upgrade libtevent0Upgrade libsamba-util-develUpgrade libwbclient0Upgrade samba-winbind-x86Upgrade libtevent-develUpgrade libdcerpc-samr-develUpgrade libndr-standard0-32bitUpgrade samba-dsdb-modulesUpgrade libsamba-policy-develUpgrade libsamdb-develUpgrade libtdb1-x86Upgrade samba-libsUpgrade libndr-standard-develUpgrade libpdb-develUpgrade libndr-nbt-develUpgrade libdcerpc0-32bitUpgrade libtalloc2-32bitUpgrade samba-develUpgrade libsamba-passdb-develUpgrade samba-client-libsUpgrade libtevent-util-develUpgrade libndr-standard0Upgrade libsmbsharemodes0Upgrade libsmbclient-raw-develUpgrade libldb2Upgrade libsmbldap0-32bitUpgrade libsmbclient0-x86Upgrade ctdbUpgrade libtevent0-32bitUpgrade libgensec-develUpgrade libsamba-util0-32bitUpgrade sambaUpgrade ldapsmbUpgrade libdcerpc-develUpgrade libtevent0-x86Upgrade libpdb0Upgrade libtevent-util0Upgrade libsmbclient-develUpgrade libsamba-hostconfig0 | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade swat | Nov 8, 2024 | Jul 29, 2011 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267Upgrade VMware ESX 4.0 to build number 660575 | Feb 3, 2012 | Jul 29, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub