CVE-2001-1355 Buffer overflows in NetWin Authentication Module (NWAuth) 3.0b and earlier, as implemented in DMail, SurgeFTP, and possibly other packages, could allow attackers to execute arbitrary code via long arg...
HighCVSS 10.0
EPSS 3.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflows in NetWin Authentication Module (NWAuth) 3.0b and earlier, as implemented in DMail, SurgeFTP, and possibly other packages, could allow attackers to execute arbitrary code via long arguments to (1) the -del command or (2) the -lookup command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netwin dmail | = 2.5d | No fix listed |
| netwin dmail | = 2.7 | No fix listed |
| netwin dmail | = 2.7q | No fix listed |
| netwin dmail | = 2.7r | No fix listed |
| netwin dmail | = 2.8e | No fix listed |
| netwin dmail | = 2.8f | No fix listed |
| netwin dmail | = 2.8g | No fix listed |
| netwin dmail | = 2.8h | No fix listed |
| netwin dmail | = 2.8i | No fix listed |
| netwin surgeftp | = 1.0b | No fix listed |
| netwin surgeftp | = 2.0a | No fix listed |
| netwin surgeftp | = 2.0b | No fix listed |
References
- 20010720 NetWin Authentication Module 3.0b password storage vulnerabilities / buffer overflows mailing-list vendor-advisory
- 3077 vdb-entry vendor-advisory
- netwin-nwauth-bo(6865) vdb-entry