CVE-2000-0936

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2000-12-19 · updated 2026-09-23

Description

Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local users to read sensitive information such as user names and passwords.

Affected products

Samba: 2.0.7

References

http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html
http://www.securityfocus.com/bid/1874
https://exchange.xforce.ibmcloud.com/vulnerabilities/5445
http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html
http://www.securityfocus.com/bid/1874
https://exchange.xforce.ibmcloud.com/vulnerabilities/5445

Get alerted when CVE-2000-0936 or the next vulnerability affects your stack