Severity : Low Published : 2011-07-29 Modified : 2011-10-03 Base Score : 2.6 Details : Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the username parameter to the passwd program (aka the user field to the Change Password page). Product/Version :   Per: http://www.samba.org/samba/security/CVE-2011-2694     'Note that SWAT must be enabled in order for this vulnerability to be exploitable. By default, SWAT is *not* enabled on a Samba install.'         Pro 5.0   CGE 5.x   Mobilinux 5.x   Mobilinux 5.0.24   MVL 5 Atom   Pro 5.0.24   MVL 5 OMAP3   MVL 5 OMAP3530

CVE-2011-4914 CVE-2011-4913 CVE-2011-4885 CVE-2011-4619 CVE-2011-4578 CVE-2011-4577 CVE-2011-4576 CVE-2011-4566 CVE-2011-4330 CVE-2011-4324 CVE-2011-4317 CVE-2011-4313 CVE-2011-4132 CVE-2011-4130 CVE-2011-4127 CVE-2011-4110 CVE-2011-4109 CVE-2011-4108 CVE-2011-4081 CVE-2011-4077 CVE-2011-4029 CVE-2011-4028 CVE-2011-3639 CVE-2011-3607 CVE-2011-3389 CVE-2011-3378 CVE-2011-3368 CVE-2011-3363 CVE-2011-3359 CVE-2011-3353 CVE-2011-3348 CVE-2011-3210 CVE-2011-3209 CVE-2011-3192 CVE-2011-3191 CVE-2011-3188 CVE-2011-3149 CVE-2011-3148 CVE-2011-3026 CVE-2011-2898 CVE-2011-2896 CVE-2011-2895 CVE-2011-2834 CVE-2011-2724 CVE-2011-2699 CVE-2011-2695 CVE-2011-2694 CVE-2011-2692 CVE-2011-2691 CVE-2011-2690 CVE-2011-2534 CVE-2011-2525 CVE-2011-2522 CVE-2011-2501 CVE-2011-2496 CVE-2011-2494 CVE-2011-2492 CVE-2011-2484 CVE-2011-2213 CVE-2011-2212 CVE-2011-2202 CVE-2011-2192 CVE-2011-2182 CVE-2011-2022 CVE-2011-1945 CVE-2011-1944 CVE-2011-1938 CVE-2011-1928 CVE-2011-1833 CVE-2011-1776 CVE-2011-1767 CVE-2011-1760 CVE-2011-1759 CVE-2011-1751 CVE-2011-1750 CVE-2011-1747 CVE-2011-1746 CVE-2011-1745 CVE-2011-1677 CVE-2011-1676 CVE-2011-1675 CVE-2011-1659 CVE-2011-1658 CVE-2011-1593 CVE-2011-1592 CVE-2011-1591 CVE-2011-1590 CVE-2011-1577 CVE-2011-1573 CVE-2011-1495 CVE-2011-1494 CVE-2011-1493 CVE-2011-1477 CVE-2011-1173 CVE-2011-1172 CVE-2011-1171 CVE-2011-1170 CVE-2011-1163 CVE-2011-1155 CVE-2011-1098 CVE-2011-1095 CVE-2011-1093 CVE-2011-1090 CVE-2011-1082 CVE-2011-1071 CVE-2011-1044 CVE-2011-1017 CVE-2011-1013 CVE-2011-1012 CVE-2011-1010 CVE-2011-0997 CVE-2011-0719 CVE-2011-0711 CVE-2011-0695 CVE-2011-0539 CVE-2011-0536 CVE-2011-0521 CVE-2011-0465 CVE-2011-0463 CVE-2011-0419 CVE-2011-0014