Unrated severityNVD Advisory· Published Aug 4, 2001· Updated Apr 16, 2026
CVE-2001-1356
CVE-2001-1356
Description
NetWin SurgeFTP 2.0f and earlier encrypts passwords using weak hashing, a fixed salt value and modulo 40 calculations, which allows remote attackers to conduct brute force password guessing attacks against the administrator account on port 7021.
Affected products
6cpe:2.3:a:netwin:surgeftp:2.0a:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:netwin:surgeftp:2.0a:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgeftp:2.0b:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgeftp:2.0c:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgeftp:2.0d:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgeftp:2.0e:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgeftp:2.0f:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- online.securityfocus.com/archive/1/201951nvdVendor Advisory
- www.iss.net/security_center/static/6961.phpnvdVendor Advisory
- www.securityfocus.com/bid/3157nvdVendor Advisory
News mentions
0No linked articles in our index yet.