CVE-2000-0936: Samba

Low severity, CVSS 2.1. EPSS: 1.1% chance of exploitation in the next 30 days.

Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local users to read sensitive information such as user names and passwords.

Affected products

• Samba Samba: version 2.0.7 only

Published 2000-12-19. Last modified 2026-09-23.