CVE-2000-0937 Samba Web Administration Tool (SWAT) in Samba 2.0.7 does not log login attempts in which the username is correct but the password is wrong, which allows remote attackers to conduct brute force passwor...
HighCVSS 7.5
EPSS 7.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Samba Web Administration Tool (SWAT) in Samba 2.0.7 does not log login attempts in which the username is correct but the password is wrong, which allows remote attackers to conduct brute force password guessing attacks.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| samba | = 2.0.7 | No fix listed |
References
- 20001030 Samba 2.0.7 SWAT vulnerabilities exploit mailing-list patch vendor-advisory
- 1873 exploit vdb-entry vendor-advisory
- samba-swat-brute-force(5442) vdb-entry