CVE-2011-2411 Code injection in n/a

What is CVE-2011-2411?

CVE-2011-2411 is a critical code injection vulnerability in Samba Samba, published on 2 Oct 2011. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Unspecified vulnerability on HP NonStop Servers with software H06.x through H06.23.00 and J06.x through J06.12.00, when Samba is used, allows remote authenticated users to execute arbitrary code via unknown vectors.

Which versions are affected by CVE-2011-2411?

It affects 3 products.

Products include Hp Nonstop Server, Hp Nonstop Server Software, Samba Samba.

How do I fix CVE-2011-2411?

Apply the vendor's patch.

Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.

Is CVE-2011-2411 being exploited?

There is no known exploitation of CVE-2011-2411 in the wild and no public exploit code.

Other vulnerabilities in Samba Samba

• CVE-2009-2686 Privilege escalation in n/a High 7.2
• CVE-2012-3280 Information disclosure in n/a Medium 6.3
• CVE-2006-5704 Missing authorization in n/a Medium 6.2
• CVE-2009-2678 Information disclosure in n/a Medium 4.0

All Samba Samba vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-54vh-qpwp-xfr9, MINI-3r45-9w57-g7fq.