Vulnerability in Samba

CVE-2000-0936

Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local users to read sensitive information such as user names and passwords.

EPSS: 0.011 (63.0th percentile) — read the EPSS interpretation.

Affected products

  • Samba — versions 2.0.7
  • N/a — versions n/a

Public proof-of-concept exploits

References

  • cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ, Patch)
  • cve@mitre.org (vdb-entry, x_refsource_XF)
  • cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)

Frequently asked questions

What is CVE-2000-0936?
CVE-2000-0936 is a vulnerability in Samba. Published 2000-12-19.
Is CVE-2000-0936 known to be exploited?
1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.