Vulnerability in Sambar Sambar_server
CVE-2001-1106
The default configuration of Sambar Server 5 and earlier uses a symmetric key that is compiled into the binary program for encrypting passwords, which could allow local users to break all user passwords by cracking the key or modifying a c…
EPSS: 0.024 (82.1th percentile) — read the EPSS interpretation.
Affected products
- Sambar Sambar_server — versions 4.1, 4.2.1_production, 4.3
- N/a — versions n/a
References
- cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_XF)