PT-2000-1848 · Samba · Samba

Published 2000-12-19 · Updated 2017-10-10 · CVE-2000-0936

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Samba version 2.0.7

Description The Samba Web Administration Tool (SWAT) installs the cgi.log logging file with world-readable permissions. This allows local users to read sensitive information, including user names and passwords.

Recommendations For Samba version 2.0.7, consider changing the permissions of the cgi.log file to restrict access and prevent unauthorized reading of sensitive information. As a temporary workaround, restrict access to the cgi.log file until a more permanent solution is available.

Exploit

Fix

Related Identifiers

CVE-2000-0936

Affected Products

Samba

References · 6

• 🔥 http://securityfocus.com/bid/1874 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html · Exploit
• 🔥 https://exploit-db.com/exploits/20341 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0936 · Security Note
• http://xforce.iss.net/static/5445.php · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5445 · Note