critical10.0
CVE-2001-1356
NetWin SurgeFTP 2.0f and earlier encrypts passwords using weak hashing, a fixed salt value and modulo 40 calculations, which allows remote attackers to conduct…
Impact
NetWin SurgeFTP 2.0f and earlier encrypts passwords using weak hashing, a fixed salt value and modulo 40 calculations, which allows remote attackers to conduct brute force password guessing attacks against the administrator account on port 7021.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netwin | Surgeftp | Versions 2.0a, 2.0b, 2.0c, 2.0d, 2.0e, 2.0f |