CVE-2001-1106
HIGH 7.5EPSS 2.4%
The default configuration of Sambar Server 5 and earlier uses a symmetric key that is compiled into the binary program for encrypting passwords, which could allow local users to break all user passwords by cracking the key or modifying a copy of the sambar program to call the decryption procedure.
- CVSS v2.0
- 7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P - EPSS
- 2.39% chance of exploitation in the next 30 days, 83th percentile
- Published
- 2003-04-02
- Updated
- 2024-08-08