CVEvulnerability

CVE-2001-1355

10.0 HIGH Published 2001-07-20 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2001-07-20
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Buffer overflows in NetWin Authentication Module (NWAuth) 3.0b and earlier, as implemented in DMail, SurgeFTP, and possibly other packages, could allow attackers to execute arbitrary code via long arguments to (1) the -del command or (2) the -lookup command.

Affected configurations

• netwin dmail 2.5d • netwin dmail 2.7 • netwin dmail 2.7q • netwin dmail 2.7r • netwin dmail 2.8e • netwin dmail 2.8f • netwin dmail 2.8g • netwin dmail 2.8h • netwin dmail 2.8i • netwin surgeftp 1.0b • netwin surgeftp 2.0a • netwin surgeftp 2.0b

References