CVE-2001-1354
N/A
N/A
Summary
NetWin Authentication module (NWAuth) 2.0 and 3.0b, as implemented in SurgeFTP, DMail, and possibly other packages, uses weak password hashing, which could allow local users to decrypt passwords or use a different password that has the same hash value as the correct password.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6866
- http://www.securityfocus.com/bid/3075
- http://online.securityfocus.com/archive/1/198293
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6866
- http://www.securityfocus.com/bid/3075
- http://online.securityfocus.com/archive/1/198293
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.