4.6

CVE-2001-1354

Exploit
NetWin Authentication module (NWAuth) 2.0 and 3.0b, as implemented in SurgeFTP, DMail, and possibly other packages, uses weak password hashing, which could allow local users to decrypt passwords or use a different password that has the same hash value as the correct password.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Netwin ≫ Dmail Version2.5d
Netwin ≫ Dmail Version2.7
Netwin ≫ Dmail Version2.7q
Netwin ≫ Dmail Version2.7r
Netwin ≫ Dmail Version2.8e
Netwin ≫ Dmail Version2.8f
Netwin ≫ Dmail Version2.8g
Netwin ≫ Dmail Version2.8h
Netwin ≫ Dmail Version2.8i
Netwin ≫ Surgeftp Version1.0b
Netwin ≫ Surgeftp Version2.0a
Netwin ≫ Surgeftp Version2.0b
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.38% 0.586
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.securityfocus.com/bid/3075
Vendor Advisory
Exploit