CVEvulnerability
CVE-2000-0936
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2000-12-19
- Last modified
- 2026-09-23
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Description
Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local users to read sensitive information such as user names and passwords.
Affected configurations
• samba samba 2.0.7
References
- http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html Exploit, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/1874 Exploit, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5445 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html Exploit, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/1874 Exploit, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5445 exchange.xforce.ibmcloud.com