{"id":"CVE-2000-0937","aliases":["EUVD-2000-0924","GHSA-436h-wrjr-5hj3"],"status":"published","title":"Samba Web Administration Tool (SWAT) in Samba 2.0.7 does not log login attempts in which the...","description":"Samba Web Administration Tool (SWAT) in Samba 2.0.7 does not log login attempts in which the username is correct but the password is wrong, which allows remote attackers to conduct brute force password guessing attacks.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.07741,"percentile":0.94666,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2000-12-19T05:00:00Z","modified":"2026-06-16T21:52:48Z","exploits":[{"source":"exploitdb","id":"EDB-20340","title":"Samba 2.0.7 - SWAT Logging Failure","type":"remote","platform":"unix","date":"2000-11-01","verified":true,"url":"https://www.exploit-db.com/exploits/20340"}],"products":[{"vendor":"samba","product":"samba"}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5442","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.securityfocus.com/bid/1873","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2000-0937"},{"url":"https://github.com/advisories/GHSA-436h-wrjr-5hj3"}],"sources":{"cve":[{"id":"CVE-2000-0937","description":"Samba Web Administration Tool (SWAT) in Samba 2.0.7 does not log login attempts in which the username is correct but the password is wrong, which allows remote attackers to conduct brute force password guessing attacks.","status":"published","published":"2001-01-22T05:00:00Z","modified":"2024-08-08T05:37:31.99Z","updated_at":"2026-11-02T14:33:41.23606Z"}],"euvd":[{"id":"EUVD-2000-0924","description":"Samba Web Administration Tool (SWAT) in Samba 2.0.7 does not log login attempts in which the username is correct but the password is wrong, which allows remote attackers to conduct brute force password guessing attacks.","status":"published","published":"2001-01-22T05:00:00Z","modified":"2024-08-08T05:37:31Z","updated_at":"2026-11-03T00:56:23.327984Z"}],"ghsa":[{"id":"GHSA-436h-wrjr-5hj3","title":"Samba Web Administration Tool (SWAT) in Samba 2.0.7 does not log login attempts in which the...","description":"Samba Web Administration Tool (SWAT) in Samba 2.0.7 does not log login attempts in which the username is correct but the password is wrong, which allows remote attackers to conduct brute force password guessing attacks.","status":"published","published":"2022-04-30T18:14:36Z","modified":"2023-01-30T05:05:01Z","updated_at":"2026-11-02T14:47:10.51539Z"}],"nvd":[{"id":"CVE-2000-0937","description":"Samba Web Administration Tool (SWAT) in Samba 2.0.7 does not log login attempts in which the username is correct but the password is wrong, which allows remote attackers to conduct brute force password guessing attacks.","status":"published","published":"2000-12-19T05:00:00Z","modified":"2026-06-16T21:52:48.497Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:39.593487Z"}]}}