Samba Web Administration Tool (SWAT) in Samba 2.0.7 does not log login attempts in which the username is correct but the password is wrong, which allows remote attackers to conduct brute force password guessing attacks.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/1873 | Exploit Vendor Advisory |
http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html | Exploit Patch Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/5442 |
Configurations
Information
Published : 2000-12-18 21:00
Updated : 2017-10-09 18:29
NVD link : CVE-2000-0937
Mitre link : CVE-2000-0937
JSON object : View
CWE
Products Affected
samba
- samba