Unrated severityNVD Advisory· Published Aug 4, 2001· Updated Jun 16, 2026
CVE-2001-1356
CVE-2001-1356
Description
NetWin SurgeFTP 2.0f and earlier encrypts passwords using weak hashing, a fixed salt value and modulo 40 calculations, which allows remote attackers to conduct brute force password guessing attacks against the administrator account on port 7021.
Affected products
7cpe:2.3:a:netwin:surgeftp:2.0a:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:netwin:surgeftp:2.0a:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgeftp:2.0b:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgeftp:2.0c:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgeftp:2.0d:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgeftp:2.0e:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgeftp:2.0f:*:*:*:*:*:*:*
- (no CPE)range: <=2.0f
Patches
Vulnerability mechanics
References
3- online.securityfocus.com/archive/1/201951nvdVendor Advisory
- www.iss.net/security_center/static/6961.phpnvdVendor Advisory
- www.securityfocus.com/bid/3157nvdVendor Advisory
News mentions
0No linked articles in our index yet.