Unrated severityNVD Advisory· Published Aug 31, 2001· Updated Jun 16, 2026
CVE-2001-0981
CVE-2001-0981
Description
HP CIFS/9000 Server (SAMBA) A.01.07 and earlier with the "unix password sync" option enabled calls the passwd program without specifying the username of the user making the request, which could cause the server to change the password of a different user.
Affected products
2cpe:2.3:a:hp:cifs-9000_server:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:hp:cifs-9000_server:*:*:*:*:*:*:*:*range: <=a.01.07
- (no CPE)range: <=A.01.07
Patches
Vulnerability mechanics
References
2- archives.neohapsis.com/archives/hp/2001-q3/0048.htmlnvdPatchVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/7051nvd
News mentions
0No linked articles in our index yet.