Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local users to read sensitive information such as user names and pa…

Info

CVECVE-2000-0936

First seen2026-09-23 10:16 UTC

Disclosed+032936-04-19 08 UTC

Last updated2026-09-23 10:16 UTC

Channel statusauto

Summary

Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local users to read sensitive information such as user names and passwords.

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Affected products

Sources

NVD DATABASE

Original Links

http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html Exploit
http://www.securityfocus.com/bid/1874 Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/5445
http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html Exploit
http://www.securityfocus.com/bid/1874 Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/5445

Timeline

2026-09-23 nvd_ingest NVD