CVE-2000-0937: High severity Samba Samba vulnerability

Published Dec 19, 2000

Updated

Samba Web Administration Tool (SWAT) in Samba 2.0.7 does not log login attempts in which the username is correct but the password is wrong, which allows remote attackers to conduct brute force password guessing attacks.

Affected Software

1 affected component

Samba Samba=2.0.7

Remediation

Patch Available

http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html

Event History

Dec 19, 2000

CVE Published

05:00 AM

Jan 22, 2001

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2000-0937?

CVE-2000-0937 is considered a medium severity vulnerability due to its potential for allowing brute force password guessing attacks.

How do I fix CVE-2000-0937?

To fix CVE-2000-0937, upgrade to a later version of Samba that includes logging for failed login attempts.

What is the impact of CVE-2000-0937?

The impact of CVE-2000-0937 is that it allows attackers to guess passwords without being logged, increasing the likelihood of successful unauthorized access.

Is CVE-2000-0937 exploitable remotely?

Yes, CVE-2000-0937 is exploitable remotely, allowing attackers to conduct brute force attacks over the network.

Which version of Samba is affected by CVE-2000-0937?

CVE-2000-0937 specifically affects Samba version 2.0.7.