PT-2000-1848 · Samba · Samba

Publicado 2000-12-19 · Atualizado 2017-10-10 · CVE-2000-0936

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Samba version 2.0.7

Description The Samba Web Administration Tool (SWAT) installs the cgi.log logging file with world-readable permissions. This allows local users to read sensitive information, including user names and passwords.

Recommendations For Samba version 2.0.7, consider changing the permissions of the cgi.log file to restrict access and prevent unauthorized reading of sensitive information. As a temporary workaround, restrict access to the cgi.log file until a more permanent solution is available.

Exploit

Correção

Identificadores relacionados

CVE-2000-0936

Produtos afetados

Samba

Referências · 6

• 🔥 http://securityfocus.com/bid/1874 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html · Exploit
• 🔥 https://exploit-db.com/exploits/20341 · Exploit
• http://xforce.iss.net/static/5445.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-0936 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5445 · Nota