CVE-2000-0936

Published: Dec 19, 2000Modified: Apr 16, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local users to read sensitive information such as user names and passwords.

Affected (1)

Products: Samba: Samba

Samba

1 product

Samba

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Samba Samba	Version 2.0.7

References (6)

http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://www.securityfocus.com/bid/1874

Source: cve@mitre.org

ExploitPatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/5445

Source: cve@mitre.org

http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

http://www.securityfocus.com/bid/1874

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/5445

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.