{"id":"CVE-2000-0936","aliases":["EUVD-2000-0923","GHSA-8chm-8g8j-qf44"],"status":"published","title":"Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world...","description":"Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local users to read sensitive information such as user names and passwords.","severity":{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01124,"percentile":0.66483,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2000-12-19T05:00:00Z","modified":"2026-09-23T09:10:01Z","exploits":[{"source":"exploitdb","id":"EDB-20341","title":"Samba 2.0.7 - SWAT Logfile Permissions","type":"local","platform":"linux","date":"2000-11-01","verified":true,"url":"https://www.exploit-db.com/exploits/20341"}],"products":[{"vendor":"samba","product":"samba"}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5445","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.securityfocus.com/bid/1874","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2000-0936"},{"url":"https://github.com/advisories/GHSA-8chm-8g8j-qf44"}],"sources":{"cve":[{"id":"CVE-2000-0936","description":"Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local users to read sensitive information such as user names and passwords.","status":"published","published":"2001-01-22T05:00:00Z","modified":"2024-08-08T05:37:31.497Z","updated_at":"2026-11-02T14:33:41.23606Z"}],"euvd":[{"id":"EUVD-2000-0923","description":"Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local users to read sensitive information such as user names and passwords.","status":"published","published":"2001-01-22T05:00:00Z","modified":"2024-08-08T05:37:31Z","updated_at":"2026-11-03T00:56:23.327984Z"}],"ghsa":[{"id":"GHSA-8chm-8g8j-qf44","title":"Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world...","description":"Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local users to read sensitive information such as user names and passwords.","status":"published","published":"2022-04-30T18:14:36Z","modified":"2023-01-30T05:05:15Z","updated_at":"2026-11-02T14:47:13.933319Z"}],"nvd":[{"id":"CVE-2000-0936","description":"Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local users to read sensitive information such as user names and passwords.","status":"published","published":"2000-12-19T05:00:00Z","modified":"2026-09-23T09:10:01.707Z","cvss":[{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T14:00:39.593487Z"}]}}