VULNERABILITY INTELLIGENCE

CVE-2001-1355

CVSS score10 HIGH
EPSS probability3.56%
CISA KEVNot currently listed
Published2001-07-20
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Buffer overflows in NetWin Authentication Module (NWAuth) 3.0b and earlier, as implemented in DMail, SurgeFTP, and possibly other packages, could allow attackers to execute arbitrary code via long arguments to (1) the -del command or (2) the -lookup command.

Primary references