CVEvulnerability

CVE-2001-1356

10.0 HIGH Published 2001-08-04 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2001-08-04
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

NetWin SurgeFTP 2.0f and earlier encrypts passwords using weak hashing, a fixed salt value and modulo 40 calculations, which allows remote attackers to conduct brute force password guessing attacks against the administrator account on port 7021.

Affected configurations

• netwin surgeftp 2.0a • netwin surgeftp 2.0b • netwin surgeftp 2.0c • netwin surgeftp 2.0d • netwin surgeftp 2.0e • netwin surgeftp 2.0f

References