CVE-2000-0936: Low severity Samba Samba vulnerability
Published Dec 19, 2000
·Updated
Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local users to read sensitive information such as user names and passwords.
Affected Software
1 affected component
Samba Samba=2.0.7
Remediation
Patch Available
Event History
Dec 19, 2000
CVE Published
05:00 AM
Jan 22, 2001
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2000-0936?
CVE-2000-0936 is considered a moderate severity vulnerability due to the potential exposure of sensitive information.
2
How do I fix CVE-2000-0936?
To fix CVE-2000-0936, you should change the permissions of the cgi.log file to restrict access only to authorized users.
3
What systems are affected by CVE-2000-0936?
CVE-2000-0936 affects Samba version 2.0.7 specifically.
4
What type of information can be exposed due to CVE-2000-0936?
CVE-2000-0936 can expose sensitive information such as usernames and passwords stored in the cgi.log file.
5
Is CVE-2000-0936 still a threat today?
Although CVE-2000-0936 was identified over two decades ago, any systems still running affected versions of Samba remain at risk if not patched.