CVE-2000-0937

Samba Web Administration Tool (SWAT) in Samba 2.0.7 does not log login attempts in which the username is correct but the password is wrong, which allows remote attackers to conduct brute force password guessing attacks.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2000-12-19

Last modified

2024-08-08

Affected products

• Samba (Samba)

References

• http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html
• http://www.securityfocus.com/bid/1873
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5442