CVE-2011-2522

Exp

Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that (1) shut down daemons, (2) start daemons, (3) add shares, (4) remove shares, (5) add printers, (6) remove printers, (7) add user accounts, or (8) remove user accounts, as demonstrated by certain start, stop, and restart parameters to the status program.

Published: 2011-07-29 Last update: 2026-04-29 Assigner: [email protected] Source: [email protected]
NVD Status：Modified，CVE State: published
View at NVD, CVE.org, EUVD

CVE-2011-2522 is rated High Exploit Risk (74.8/100): CVSS Medium severity, with high exploitation likelihood (EPSS 17.51%, 95th percentile). 2 public exploit reference(s) are indexed (Exploit-DB). Public exploits are available—assess exposure, apply mitigations, and prioritize patching.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Public exploit references (Exploit-DB) for CVE-2011-2522

EDB-ID Source Kind Published Link
17577 exploit_db edb 2011-07-27 Exploit-DB ↗
— nvd_ref exploit_tag Exploit-DB ↗

Exploit prediction scoring system (EPSS) score for CVE-2011-2522

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-05-24 18.20% 17.51% -0.69%
2 2026-04-07 19.24% 18.20% -1.05%
3 2025-12-14 — 19.24% —

Full EPSS history (18 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2011-2522

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
6.8 2.0 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:M)
Exploitation needs some favorable conditions, but not exceptional ones.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:P)
Partial confidentiality impact.
Integrity impact (I:P)
Partial integrity impact.
Availability impact (A:P)
Partial availability impact.
 8.6 6.4 [email protected]

Weakness enumeration for CVE-2011-2522

OS Trackers for CVE-2011-2522

vendor priority summary link
debian low CVE-2011-2522 low priority: Debian including 1 source packages (samba), 5 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 5. https://security-tracker.debian.org/tracker/CVE-2011-2522
redhat medium — https://access.redhat.com/security/cve/CVE-2011-2522
suse medium CVE-2011-2522 severity moderate: SUSE including 630 source package names (cifs-mount-3.4.3-1.32.1, ctdb-4.10.5+git.129.35f7bb6e177-1.1, …), 975 product×package rows across 31 product lines (SUSE Linux Enterprise Desktop 12, SUSE Linux Enterprise Desktop 12 SP1, … (31 product lines)): Fixed 975. https://www.suse.com/security/cve/CVE-2011-2522/
ubuntu medium CVE-2011-2522 medium priority: Ubuntu including 1 source packages (samba), 5 status rows across 5 suites (hardy, lucid, maverick, natty, upstream): released 5. https://ubuntu.com/security/CVE-2011-2522

Affected software / configurations for CVE-2011-2522

Vendor Product Version Raw CPE
samba samba >= 3.0.0, < 3.3.16 cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*
samba samba >= 3.4.0, < 3.4.14 cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*
samba samba >= 3.5.0, < 3.5.10 cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*
debian debian_linux 5.0 cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*
debian debian_linux 6.0 cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*
debian debian_linux 7.0 cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
canonical ubuntu_linux 8.04 cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*
canonical ubuntu_linux 10.04 cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*
canonical ubuntu_linux 10.10 cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*
canonical ubuntu_linux 11.04 cpe:2.3:o:canonical:ubuntu_linux:11.04:*:*:*:*:*:*:*

References for CVE-2011-2522

URL Tags
http://jvn.jp/en/jp/JVN29529126/index.html Third Party Advisory
http://marc.info/?l=bugtraq&m=133527864025056&w=2 Mailing List Third Party Advisory
http://osvdb.org/74071 Broken Link
http://samba.org/samba/history/samba-3.5.10.html Vendor Advisory
http://secunia.com/advisories/45393 Third Party Advisory
http://secunia.com/advisories/45488 Third Party Advisory
http://secunia.com/advisories/45496 Third Party Advisory
http://securityreason.com/securityalert/8317 Third Party Advisory
http://securitytracker.com/id?1025852 Third Party Advisory VDB Entry
http://ubuntu.com/usn/usn-1182-1 Third Party Advisory
http://www.debian.org/security/2011/dsa-2290 Third Party Advisory
http://www.exploit-db.com/exploits/17577 Exploit Third Party Advisory VDB Entry
http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c03008543 Broken Link
http://www.mandriva.com/security/advisories?name=MDVSA-2011:121 Broken Link
http://www.samba.org/samba/security/CVE-2011-2522 Vendor Advisory
http://www.securityfocus.com/bid/48899 Third Party Advisory VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=721348 Issue Tracking Patch Third Party Advisory
https://bugzilla.samba.org/show_bug.cgi?id=8290 Issue Tracking Patch Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/68843 Third Party Advisory VDB Entry
cvelogic Threat Intelligence