CVE-2013-0213

Common Vulnerabilities and Exposures

Upstream information

CVE-2013-0213 at MITRE

Description

The Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.21, 3.6.x before 3.6.12, and 4.x before 4.0.2 allows remote attackers to conduct clickjacking attacks via a (1) FRAME or (2) IFRAME element.

NVD CVSS v2 Base Score: 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P)

Novell/SUSE information

Novell Bugzilla entry: 799641, 800982

SUSE Security Advisories:

SUSE-SU-2013:0325-1, published Fri, 22 Feb 2013 16:04:20 +0100 (CET)
SUSE-SU-2013:0326-1, published Fri, 22 Feb 2013 17:04:27 +0100 (CET)
SUSE-SU-2013:0519-1, published Fri, 22 Mar 2013 15:04:30 +0100 (CET)
openSUSE-SU-2013:0277-1, published Tue, 12 Feb 2013 10:06:59 +0100 (CET)
openSUSE-SU-2013:0281-1, published Tue, 12 Feb 2013 11:06:06 +0100 (CET)

List of released packages

Product(s)	Fixed package version(s)	References
SUSE Linux Enterprise Desktop 10 SP4 for x86	`cifs-mount >= 3.0.36-0.13.24.1` `ldapsmb >= 1.34b-25.13.24.1` `libsmbclient >= 3.0.36-0.13.24.1` `libsmbclient-devel >= 3.0.36-0.13.24.1` `samba >= 3.0.36-0.13.24.1` `samba-client >= 3.0.36-0.13.24.1` `samba-doc >= 3.0.36-0.12.24.1` `samba-krb-printing >= 3.0.36-0.13.24.1` `samba-vscan >= 0.3.6b-43.13.24.1` `samba-winbind >= 3.0.36-0.13.24.1`	Builds ZYPP Patch Nr: 8449
SUSE Linux Enterprise Desktop 10 SP4 for AMD64 and Intel EM64T	`cifs-mount >= 3.0.36-0.13.24.1` `ldapsmb >= 1.34b-25.13.24.1` `libsmbclient >= 3.0.36-0.13.24.1` `libsmbclient-32bit >= 3.0.36-0.13.24.1` `libsmbclient-devel >= 3.0.36-0.13.24.1` `samba >= 3.0.36-0.13.24.1` `samba-32bit >= 3.0.36-0.13.24.1` `samba-client >= 3.0.36-0.13.24.1` `samba-client-32bit >= 3.0.36-0.13.24.1` `samba-doc >= 3.0.36-0.12.24.1` `samba-krb-printing >= 3.0.36-0.13.24.1` `samba-vscan >= 0.3.6b-43.13.24.1` `samba-winbind >= 3.0.36-0.13.24.1` `samba-winbind-32bit >= 3.0.36-0.13.24.1`	Builds ZYPP Patch Nr: 8449
SLE SDK 10 SP4 for IBM iSeries and IBM pSeries SLE SDK 10 SP4 for IBM zSeries SLE SDK 10 SP4 for IPF SLE SDK 10 SP4 for X86-64 SLE SDK 10 SP4 for x86	`libmsrpc >= 3.0.36-0.13.24.1` `libmsrpc-devel >= 3.0.36-0.13.24.1` `libsmbclient-devel >= 3.0.36-0.13.24.1` `libsmbsharemodes >= 3.0.36-0.13.24.1` `libsmbsharemodes-devel >= 3.0.36-0.13.24.1` `samba-python >= 3.0.36-0.13.24.1`	Builds ZYPP Patch Nr: 8449
SUSE Linux Enterprise Server 10 SP4 for x86	`cifs-mount >= 3.0.36-0.13.24.1` `ldapsmb >= 1.34b-25.13.24.1` `libmsrpc >= 3.0.36-0.13.24.1` `libmsrpc-devel >= 3.0.36-0.13.24.1` `libsmbclient >= 3.0.36-0.13.24.1` `libsmbclient-devel >= 3.0.36-0.13.24.1` `samba >= 3.0.36-0.13.24.1` `samba-client >= 3.0.36-0.13.24.1` `samba-doc >= 3.0.36-0.12.24.1` `samba-krb-printing >= 3.0.36-0.13.24.1` `samba-python >= 3.0.36-0.13.24.1` `samba-vscan >= 0.3.6b-43.13.24.1` `samba-winbind >= 3.0.36-0.13.24.1`	Builds ZYPP Patch Nr: 8449
SUSE Linux Enterprise Server 10 SP4 for IPF	`cifs-mount >= 3.0.36-0.13.24.1` `ldapsmb >= 1.34b-25.13.24.1` `libmsrpc >= 3.0.36-0.13.24.1` `libmsrpc-devel >= 3.0.36-0.13.24.1` `libsmbclient >= 3.0.36-0.13.24.1` `libsmbclient-devel >= 3.0.36-0.13.24.1` `libsmbclient-x86 >= 3.0.36-0.13.24.1` `samba >= 3.0.36-0.13.24.1` `samba-client >= 3.0.36-0.13.24.1` `samba-client-x86 >= 3.0.36-0.13.24.1` `samba-doc >= 3.0.36-0.12.24.1` `samba-krb-printing >= 3.0.36-0.13.24.1` `samba-python >= 3.0.36-0.13.24.1` `samba-vscan >= 0.3.6b-43.13.24.1` `samba-winbind >= 3.0.36-0.13.24.1` `samba-winbind-x86 >= 3.0.36-0.13.24.1` `samba-x86 >= 3.0.36-0.13.24.1`	Builds ZYPP Patch Nr: 8449
SUSE Linux Enterprise Server 10 SP4 for IBM POWER	`cifs-mount >= 3.0.36-0.13.24.1` `ldapsmb >= 1.34b-25.13.24.1` `libmsrpc >= 3.0.36-0.13.24.1` `libmsrpc-devel >= 3.0.36-0.13.24.1` `libsmbclient >= 3.0.36-0.13.24.1` `libsmbclient-64bit >= 3.0.36-0.13.24.1` `libsmbclient-devel >= 3.0.36-0.13.24.1` `samba >= 3.0.36-0.13.24.1` `samba-64bit >= 3.0.36-0.13.24.1` `samba-client >= 3.0.36-0.13.24.1` `samba-client-64bit >= 3.0.36-0.13.24.1` `samba-doc >= 3.0.36-0.12.24.1` `samba-krb-printing >= 3.0.36-0.13.24.1` `samba-python >= 3.0.36-0.13.24.1` `samba-vscan >= 0.3.6b-43.13.24.1` `samba-winbind >= 3.0.36-0.13.24.1` `samba-winbind-64bit >= 3.0.36-0.13.24.1`	Builds ZYPP Patch Nr: 8449
SUSE Linux Enterprise Server 10 SP4 for AMD64 and Intel EM64T SUSE Linux Enterprise Server 10 SP4 for IBM zSeries 64bit	`cifs-mount >= 3.0.36-0.13.24.1` `ldapsmb >= 1.34b-25.13.24.1` `libmsrpc >= 3.0.36-0.13.24.1` `libmsrpc-devel >= 3.0.36-0.13.24.1` `libsmbclient >= 3.0.36-0.13.24.1` `libsmbclient-32bit >= 3.0.36-0.13.24.1` `libsmbclient-devel >= 3.0.36-0.13.24.1` `samba >= 3.0.36-0.13.24.1` `samba-32bit >= 3.0.36-0.13.24.1` `samba-client >= 3.0.36-0.13.24.1` `samba-client-32bit >= 3.0.36-0.13.24.1` `samba-doc >= 3.0.36-0.12.24.1` `samba-krb-printing >= 3.0.36-0.13.24.1` `samba-python >= 3.0.36-0.13.24.1` `samba-vscan >= 0.3.6b-43.13.24.1` `samba-winbind >= 3.0.36-0.13.24.1` `samba-winbind-32bit >= 3.0.36-0.13.24.1`	Builds ZYPP Patch Nr: 8449
SUSE Linux Enterprise Server 10 GPLv3 Extras for AMD64 and Intel EM64T SUSE Linux Enterprise Server 10 GPLv3 Extras for IBM POWER SUSE Linux Enterprise Server 10 GPLv3 Extras for IBM zSeries 64bit SUSE Linux Enterprise Server 10 GPLv3 Extras for IPF	`libnetapi-devel >= 3.4.3-0.47.3` `libnetapi0 >= 3.4.3-0.47.3` `libtalloc-devel >= 3.4.3-0.47.3` `libtalloc1 >= 3.4.3-0.47.3` `libtdb-devel >= 3.4.3-0.47.3` `libtdb1 >= 3.4.3-0.47.3` `libwbclient-devel >= 3.4.3-0.47.3` `libwbclient0 >= 3.4.3-0.47.3` `samba-gplv3 >= 3.4.3-0.47.3` `samba-gplv3-client >= 3.4.3-0.47.3` `samba-gplv3-doc >= 3.4.3-0.47.3` `samba-gplv3-krb-printing >= 3.4.3-0.47.3` `samba-gplv3-winbind >= 3.4.3-0.47.3`	Builds ZYPP Patch Nr: 8490
SUSE CORE 9 for AMD64 and Intel EM64T	`libsmbclient >= 3.0.26a-0.28` `libsmbclient-32bit >= 9-201302221838` `libsmbclient-devel >= 3.0.26a-0.28` `samba >= 3.0.26a-0.28` `samba-32bit >= 9-201302221838` `samba-client >= 3.0.26a-0.28` `samba-client-32bit >= 9-201302221838` `samba-doc >= 3.0.26a-0.28` `samba-pdb >= 3.0.26a-0.28` `samba-python >= 3.0.26a-0.28` `samba-vscan >= 0.3.6b-0.60` `samba-winbind >= 3.0.26a-0.28` `samba-winbind-32bit >= 9-201302221838`	Builds YOU Patch Nr: 12929
SLE 11 SP2 DEBUGINFO	`samba-debuginfo >= 3.6.3-0.30.1` `samba-debugsource >= 3.6.3-0.30.1`	Builds SAT Patch Nr: 7292
SLE 11 SP2 DEBUGINFO	`samba-debuginfo >= 3.6.3-0.30.1` `samba-debuginfo-x86 >= 3.6.3-0.30.1` `samba-debugsource >= 3.6.3-0.30.1`	Builds SAT Patch Nr: 7292
SLE 11 SP2 DEBUGINFO	`samba-debuginfo >= 3.6.3-0.30.1` `samba-debuginfo-32bit >= 3.6.3-0.30.1` `samba-debugsource >= 3.6.3-0.30.1`	Builds SAT Patch Nr: 7292
SUSE Linux Enterprise Software Development Kit 11 SP2	`libldb-devel >= 3.6.3-0.30.1` `libnetapi-devel >= 3.6.3-0.30.1` `libnetapi0 >= 3.6.3-0.30.1` `libsmbclient-devel >= 3.6.3-0.30.1` `libsmbsharemodes-devel >= 3.6.3-0.30.1` `libsmbsharemodes0 >= 3.6.3-0.30.1` `libtalloc-devel >= 3.6.3-0.30.1` `libtdb-devel >= 3.6.3-0.30.1` `libtevent-devel >= 3.6.3-0.30.1` `libwbclient-devel >= 3.6.3-0.30.1` `samba-devel >= 3.6.3-0.30.1`	Builds SAT Patch Nr: 7292
SUSE Linux Enterprise Desktop 11 SP2	`libldb1 >= 3.6.3-0.30.1` `libsmbclient0 >= 3.6.3-0.30.1` `libtalloc1 >= 3.4.3-1.42.11` `libtalloc2 >= 3.6.3-0.30.1` `libtdb1 >= 3.6.3-0.30.1` `libtevent0 >= 3.6.3-0.30.1` `libwbclient0 >= 3.6.3-0.30.1` `samba >= 3.6.3-0.30.1` `samba-client >= 3.6.3-0.30.1` `samba-krb-printing >= 3.6.3-0.30.1` `samba-winbind >= 3.6.3-0.30.1`	Builds SAT Patch Nr: 7292
SUSE Linux Enterprise Desktop 11 SP2	`libldb1 >= 3.6.3-0.30.1` `libldb1-32bit >= 3.6.3-0.30.1` `libsmbclient0 >= 3.6.3-0.30.1` `libsmbclient0-32bit >= 3.6.3-0.30.1` `libtalloc1 >= 3.4.3-1.42.11` `libtalloc1-32bit >= 3.4.3-1.42.11` `libtalloc2 >= 3.6.3-0.30.1` `libtalloc2-32bit >= 3.6.3-0.30.1` `libtdb1 >= 3.6.3-0.30.1` `libtdb1-32bit >= 3.6.3-0.30.1` `libtevent0 >= 3.6.3-0.30.1` `libtevent0-32bit >= 3.6.3-0.30.1` `libwbclient0 >= 3.6.3-0.30.1` `libwbclient0-32bit >= 3.6.3-0.30.1` `samba >= 3.6.3-0.30.1` `samba-32bit >= 3.6.3-0.30.1` `samba-client >= 3.6.3-0.30.1` `samba-client-32bit >= 3.6.3-0.30.1` `samba-krb-printing >= 3.6.3-0.30.1` `samba-winbind >= 3.6.3-0.30.1` `samba-winbind-32bit >= 3.6.3-0.30.1`	Builds SAT Patch Nr: 7292
SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2 for VMware	`ldapsmb >= 1.34b-12.30.1` `libldb1 >= 3.6.3-0.30.1` `libsmbclient0 >= 3.6.3-0.30.1` `libtalloc1 >= 3.4.3-1.42.11` `libtalloc2 >= 3.6.3-0.30.1` `libtdb1 >= 3.6.3-0.30.1` `libtevent0 >= 3.6.3-0.30.1` `libwbclient0 >= 3.6.3-0.30.1` `samba >= 3.6.3-0.30.1` `samba-client >= 3.6.3-0.30.1` `samba-krb-printing >= 3.6.3-0.30.1` `samba-winbind >= 3.6.3-0.30.1`	Builds SAT Patch Nr: 7292
SUSE Linux Enterprise Server 11 SP2	`ldapsmb >= 1.34b-12.30.1` `libldb1 >= 3.6.3-0.30.1` `libsmbclient0 >= 3.6.3-0.30.1` `libsmbclient0-x86 >= 3.6.3-0.30.1` `libtalloc1 >= 3.4.3-1.42.11` `libtalloc1-x86 >= 3.4.3-1.42.11` `libtalloc2 >= 3.6.3-0.30.1` `libtalloc2-x86 >= 3.6.3-0.30.1` `libtdb1 >= 3.6.3-0.30.1` `libtdb1-x86 >= 3.6.3-0.30.1` `libtevent0 >= 3.6.3-0.30.1` `libwbclient0 >= 3.6.3-0.30.1` `libwbclient0-x86 >= 3.6.3-0.30.1` `samba >= 3.6.3-0.30.1` `samba-client >= 3.6.3-0.30.1` `samba-client-x86 >= 3.6.3-0.30.1` `samba-krb-printing >= 3.6.3-0.30.1` `samba-winbind >= 3.6.3-0.30.1` `samba-winbind-x86 >= 3.6.3-0.30.1` `samba-x86 >= 3.6.3-0.30.1`	Builds SAT Patch Nr: 7292
SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2 for VMware	`ldapsmb >= 1.34b-12.30.1` `libldb1 >= 3.6.3-0.30.1` `libsmbclient0 >= 3.6.3-0.30.1` `libsmbclient0-32bit >= 3.6.3-0.30.1` `libtalloc1 >= 3.4.3-1.42.11` `libtalloc1-32bit >= 3.4.3-1.42.11` `libtalloc2 >= 3.6.3-0.30.1` `libtalloc2-32bit >= 3.6.3-0.30.1` `libtdb1 >= 3.6.3-0.30.1` `libtdb1-32bit >= 3.6.3-0.30.1` `libtevent0 >= 3.6.3-0.30.1` `libwbclient0 >= 3.6.3-0.30.1` `libwbclient0-32bit >= 3.6.3-0.30.1` `samba >= 3.6.3-0.30.1` `samba-32bit >= 3.6.3-0.30.1` `samba-client >= 3.6.3-0.30.1` `samba-client-32bit >= 3.6.3-0.30.1` `samba-krb-printing >= 3.6.3-0.30.1` `samba-winbind >= 3.6.3-0.30.1` `samba-winbind-32bit >= 3.6.3-0.30.1`	Builds SAT Patch Nr: 7292