2.1low
CVE-2000-09361 exploit
Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local u…
Published 25 y ago · modified 45 d ago · JSON
CVSS
2.1
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.1%
percentile 66%
Public exploits
1
Exploit-DB
Summary
Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local users to read sensitive information such as user names and passwords.
Exploit prediction (EPSS)
1.12% probability of exploitation in the next 30 days, higher than 66% of all scored CVEs.
Exploits and detections
- EDB-20341 Samba 2.0.7 - SWAT Logfile Permissions · local · 2000-11-01
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 2.1 | AV:L/AC:L/Au:N/C:P/I:N/A:N |
References
- archives.neohapsis.com /archives/bugtraq/2000-10/0430.html · mailing-list, x_refsource_BUGTRAQ, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/5445 · vdb-entry, x_refsource_XF, x_transferred
- securityfocus.com /bid/1874 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2000-0936
- NVD: CVE-2000-0936
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.