What’s Vulnerable › Vulnerabilities

CVE-2001-1356

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2001-08-04 · updated 2026-06-16

Description

NetWin SurgeFTP 2.0f and earlier encrypts passwords using weak hashing, a fixed salt value and modulo 40 calculations, which allows remote attackers to conduct brute force password guessing attacks against the administrator account on port 7021.

Affected products

• Netwin SurgeFTP: 2.0a, 2.0b, 2.0c, 2.0d, 2.0e, 2.0f

References

• http://online.securityfocus.com/archive/1/201951
• http://www.iss.net/security_center/static/6961.php
• http://www.securityfocus.com/bid/3157
• http://online.securityfocus.com/archive/1/201951
• http://www.iss.net/security_center/static/6961.php
• http://www.securityfocus.com/bid/3157

Get alerted when CVE-2001-1356 or the next vulnerability affects your stack