« Volver al listado

CVE-2001-1354

Estado: ModificadaMedia (4.6)—

NetWin Authentication module (NWAuth) 2.0 and 3.0b, as implemented in SurgeFTP, DMail, and possibly other packages, uses weak password hashing, which could allow local users to decrypt passwords or use a different password that has the same hash value as the correct password.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Netwin — DmailNetwin — Surgeftp

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2001-1354",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.6,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": true,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2001-07-20T04:00:00.000",
  "references": [
    {
      "url": "http://online.securityfocus.com/archive/1/198293",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/3075",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/6866",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://online.securityfocus.com/archive/1/198293",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/3075",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/6866",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "NetWin Authentication module (NWAuth) 2.0 and 3.0b, as implemented in SurgeFTP, DMail, and possibly other packages, uses weak password hashing, which could allow local users to decrypt passwords or use a different password that has the same hash value as the correct password."
    }
  ],
  "lastModified": "2026-06-16T21:56:06.323",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:netwin:dmail:2.5d:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EF456029-C817-4FC5-AFE2-9637219E220C"
            },
            {
              "criteria": "cpe:2.3:a:netwin:dmail:2.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "60C72EA3-5D19-44B7-AB3D-99122A470205"
            },
            {
              "criteria": "cpe:2.3:a:netwin:dmail:2.7q:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "316BCDB3-3762-436F-91B2-41231A55CB96"
            },
            {
              "criteria": "cpe:2.3:a:netwin:dmail:2.7r:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AD266925-B677-4462-9BF6-0828FD5CBF41"
            },
            {
              "criteria": "cpe:2.3:a:netwin:dmail:2.8e:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A5BD3CC6-5E2C-4534-925E-B81D92F18A1F"
            },
            {
              "criteria": "cpe:2.3:a:netwin:dmail:2.8f:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C25AB545-FCF5-42FB-801E-07DF0ADC4865"
            },
            {
              "criteria": "cpe:2.3:a:netwin:dmail:2.8g:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EF6F3B04-6DA7-42F8-8873-7625B93523ED"
            },
            {
              "criteria": "cpe:2.3:a:netwin:dmail:2.8h:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F44C662D-58ED-41E0-8718-259321F9F9E9"
            },
            {
              "criteria": "cpe:2.3:a:netwin:dmail:2.8i:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CEE745C7-C370-44FF-BAC4-EE93EE6AFC46"
            },
            {
              "criteria": "cpe:2.3:a:netwin:surgeftp:1.0b:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BE4FD50F-DDFA-40AD-BFCC-F606CEF450F1"
            },
            {
              "criteria": "cpe:2.3:a:netwin:surgeftp:2.0a:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AC94C372-7536-4692-AEA7-B58B32E2A5F1"
            },
            {
              "criteria": "cpe:2.3:a:netwin:surgeftp:2.0b:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "59DB045D-91F6-4AFC-8331-F2155D38D5FE"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}