Vulnerability in Netwin Surgeftp
CVE-2001-1356
NetWin SurgeFTP 2.0f and earlier encrypts passwords using weak hashing, a fixed salt value and modulo 40 calculations, which allows remote attackers to conduct brute force password guessing attacks against the administrator account on port 7021.
EPSS: 0.038 (89.0th percentile) — read the EPSS interpretation.
Affected products
- Netwin Surgeftp — versions 2.0a, 2.0b, 2.0c
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, Vendor Advisory, x_refsource_XF)
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_BID, Vendor Advisory)