4.6

CVE-2001-1354

Exploit
NetWin Authentication module (NWAuth) 2.0 and 3.0b, as implemented in SurgeFTP, DMail, and possibly other packages, uses weak password hashing, which could allow local users to decrypt passwords or use a different password that has the same hash value as the correct password.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Netwin ≫ Dmail Version 2.5d
Netwin ≫ Dmail Version 2.7
Netwin ≫ Dmail Version 2.7q
Netwin ≫ Dmail Version 2.7r
Netwin ≫ Dmail Version 2.8e
Netwin ≫ Dmail Version 2.8f
Netwin ≫ Dmail Version 2.8g
Netwin ≫ Dmail Version 2.8h
Netwin ≫ Dmail Version 2.8i
Netwin ≫ Surgeftp Version 1.0b
Netwin ≫ Surgeftp Version 2.0a
Netwin ≫ Surgeftp Version 2.0b
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.78% 0.51
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://online.securityfocus.com/archive/1/198293
Vendor Advisory
http://www.securityfocus.com/bid/3075
Vendor Advisory
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/6866