VULNERABILITY INTELLIGENCE
CVE-2001-1354
CVSS score4.6 MEDIUM
EPSS probability0.78%
CISA KEVNot currently listed
Published2001-07-20
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:P
Description
NetWin Authentication module (NWAuth) 2.0 and 3.0b, as implemented in SurgeFTP, DMail, and possibly other packages, uses weak password hashing, which could allow local users to decrypt passwords or use a different password that has the same hash value as the correct password.
Primary references
- cve@mitre.org — Vendor Advisory
- cve@mitre.org — Exploit, Vendor Advisory
- cve@mitre.org
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108