20001030 Samba 2.0.7 SWAT vulnerabilitiesmailing list
http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html CVE-2000-0936
Samba 2.0.7 - SWAT Logfile Permissions
Record summary
CVE-2000-0936 has a selected CVSS score of 2.1; EIP currently links 1 catalogued exploit.
Description
Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local users to read sensitive information such as user names and passwords.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBSamba 2.0.7 - SWAT Logfile PermissionsExploitDB exploitby miahNot analyzed1 file
References
41874vdb entry
http://www.securityfocus.com/bid/1874 samba-swat-logfile-info(5445)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/5445 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2000-0936