20001030 Samba 2.0.7 SWAT vulnerabilitiesmailing list
http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html CVE-2000-0937
Samba 2.0.7 - SWAT Logging Failure
Record summary
CVE-2000-0937 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
Samba Web Administration Tool (SWAT) in Samba 2.0.7 does not log login attempts in which the username is correct but the password is wrong, which allows remote attackers to conduct brute force password guessing attacks.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBSamba 2.0.7 - SWAT Logging FailureExploitDB exploitby dodeca-TNot analyzed1 file
References
41873vdb entry
http://www.securityfocus.com/bid/1873 samba-swat-brute-force(5442)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/5442 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2000-0937