Improper input validation in Samba

CVE-2013-0213

The Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.21, 3.6.x before 3.6.12, and 4.x before 4.0.2 allows remote attackers to conduct clickjacking attacks via a (1) FRAME or (2) IFRAME element.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.032 (87.0th percentile) — read the EPSS interpretation.

Affected products

  • Samba — versions 3.0.0, 3.0.1, 3.0.2
  • N/a — versions n/a

Weakness classification (CWE)

References