CVEvulnerability

CVE-2001-1354

4.6 MEDIUM Published 2001-07-20 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2001-07-20
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P

Description

NetWin Authentication module (NWAuth) 2.0 and 3.0b, as implemented in SurgeFTP, DMail, and possibly other packages, uses weak password hashing, which could allow local users to decrypt passwords or use a different password that has the same hash value as the correct password.

Affected configurations

• netwin dmail 2.5d • netwin dmail 2.7 • netwin dmail 2.7q • netwin dmail 2.7r • netwin dmail 2.8e • netwin dmail 2.8f • netwin dmail 2.8g • netwin dmail 2.8h • netwin dmail 2.8i • netwin surgeftp 1.0b • netwin surgeftp 2.0a • netwin surgeftp 2.0b

References