CVE-2001-1106

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2001-07-25 · updated 2026-06-16

Description

The default configuration of Sambar Server 5 and earlier uses a symmetric key that is compiled into the binary program for encrypting passwords, which could allow local users to break all user passwords by cracking the key or modifying a copy of the sambar program to call the decryption procedure.

Affected products

Sambar Server: 4.1, 4.2.1_production, 4.3, 4.4, 5.0-beta1, 5.0-beta2 (+3)

References

http://www.securityfocus.com/archive/1/199418
http://www.securityfocus.com/bid/3095
https://exchange.xforce.ibmcloud.com/vulnerabilities/6909
http://www.securityfocus.com/archive/1/199418
http://www.securityfocus.com/bid/3095
https://exchange.xforce.ibmcloud.com/vulnerabilities/6909

Get alerted when CVE-2001-1106 or the next vulnerability affects your stack