Lucene search

K
cve[email protected]CVE-2000-0937
HistoryDec 19, 2000 - 5:00 a.m.

CVE-2000-0937

2000-12-1905:00:00
NVD-CWE-Other
web.nvd.nist.gov
19
samba
swat
login attempt
brute force
password guessing
nvd
cve-2000-0937

7.6 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.026 Low

EPSS

Percentile

90.2%

Samba Web Administration Tool (SWAT) in Samba 2.0.7 does not log login attempts in which the username is correct but the password is wrong, which allows remote attackers to conduct brute force password guessing attacks.

CPENameOperatorVersion
samba:sambasambaeq2.0.7

7.6 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.026 Low

EPSS

Percentile

90.2%

Related for CVE-2000-0937