CVE-2000-0935

This exploit leverages a symlink vulnerability in Samba SWAT's logging mechanism to overwrite arbitrary files, specifically targeting /etc/passwd to add a root user. It requires local access and SWAT with CGI logging enabled.

This exploit leverages a symlink vulnerability in Samba SWAT's logging mechanism to overwrite /etc/passwd, enabling local privilege escalation to root. It creates a malicious user entry and restores the original passwd file after exploitation.