low2.1Public exploit code
CVE-2000-0936
Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local users to read sensiti…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Samba 2.0.7 - SWAT Logfile Permissions2000-11-01 · local · linux · Verified
Impact
Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local users to read sensitive information such as user names and passwords.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Samba | Samba | Version 2.0.7 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html
- http://www.securityfocus.com/bid/1874
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5445
- http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html
- http://www.securityfocus.com/bid/1874
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5445