high7.5Public exploit code
CVE-2000-0937
Samba Web Administration Tool (SWAT) in Samba 2.0.7 does not log login attempts in which the username is correct but the password is wrong, which allows remote…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Samba 2.0.7 - SWAT Logging Failure2000-11-01 · remote · unix · Verified
Impact
Samba Web Administration Tool (SWAT) in Samba 2.0.7 does not log login attempts in which the username is correct but the password is wrong, which allows remote attackers to conduct brute force password guessing attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Samba | Samba | Version 2.0.7 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html
- http://www.securityfocus.com/bid/1873
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5442
- http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html
- http://www.securityfocus.com/bid/1873
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5442