What’s Vulnerable › Vulnerabilities

CVE-2001-0981

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2001-08-31 · updated 2026-06-16

Description

HP CIFS/9000 Server (SAMBA) A.01.07 and earlier with the "unix password sync" option enabled calls the passwd program without specifying the username of the user making the request, which could cause the server to change the password of a different user.

Affected products

• HP Cifs-9000 Server: through a.01.07

References

• http://archives.neohapsis.com/archives/hp/2001-q3/0048.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7051
• http://archives.neohapsis.com/archives/hp/2001-q3/0048.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7051

Get alerted when CVE-2001-0981 or the next vulnerability affects your stack