Unrated severityNVD Advisory· Published Jul 25, 2001· Updated Apr 16, 2026
CVE-2001-1106
CVE-2001-1106
Description
The default configuration of Sambar Server 5 and earlier uses a symmetric key that is compiled into the binary program for encrypting passwords, which could allow local users to break all user passwords by cracking the key or modifying a copy of the sambar program to call the decryption procedure.
Affected products
9cpe:2.3:a:sambar:sambar_server:4.1:*:*:*:*:*:*:*+ 8 more
- cpe:2.3:a:sambar:sambar_server:4.1:*:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:4.2.1_production:*:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:4.3:*:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:4.4:*:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:5.0:beta1:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:5.0:beta2:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:5.0:beta3:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:5.0:beta4:*:*:*:*:*:*
- cpe:2.3:a:sambar:sambar_server:5.0:beta5:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- www.securityfocus.com/bid/3095nvdExploitPatchVendor Advisory
- www.securityfocus.com/archive/1/199418nvdVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/6909nvd
News mentions
0No linked articles in our index yet.