Vulnerability identifier: #VU32701
Vulnerability risk: Medium
CVSSv3.1: 4.9 [CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C]
CVE-ID:
CWE-ID:
CWE-352
Exploitation vector: Network
Exploit availability: No
Vulnerable software:
Samba
Server applications /
Directory software, identity management
Vendor: Samba
Description
The vulnerability allows a remote attacker to perform cross-site request forgery attacks.
The vulnerability exists due to insufficient validation of the HTTP request origin. A remote attacker can trick the victim to visit a specially crafted web page and perform arbitrary actions on behalf of the victim on the vulnerable website.
Mitigation
Update to version 3.5.21.
Vulnerable software versions
Samba: 3.0 - 3.0.37, 3.1 - 3.1.0, 3.2 - 3.2.15, 3.3 - 3.3.16, 3.4 - 3.4.17, 3.5 - 3.5.20
External links
http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00019.html
http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00042.html
http://lists.opensuse.org/opensuse-updates/2013-02/msg00029.html
http://lists.opensuse.org/opensuse-updates/2013-02/msg00033.html
http://osvdb.org/89627
http://rhn.redhat.com/errata/RHSA-2013-1310.html
http://rhn.redhat.com/errata/RHSA-2013-1542.html
http://rhn.redhat.com/errata/RHSA-2014-0305.html
http://www.debian.org/security/2013/dsa-2617
http://www.samba.org/samba/security/CVE-2013-0214
http://www.securityfocus.com/bid/57631
http://www.ubuntu.com/usn/USN-2922-1
http://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05115993
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.