Vulnerability in Sambar Server

CVE-2001-1106

The default configuration of Sambar Server 5 and earlier uses a symmetric key that is compiled into the binary program for encrypting passwords, which could allow local users to break all user passwords by cracking the key or modifying a copy of the sambar program to call the decryption procedure.

EPSS: 0.024 (83.0th percentile) — read the EPSS interpretation.

Affected products

Sambar Sambar_server — versions 4.1, 4.2.1_production, 4.3
N/a — versions n/a

References

cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (vdb-entry, x_refsource_XF)