Back to Database
Status published
High
CVE-2001-1106
The default configuration of Sambar Server 5 and earlier uses...
Vulnerability Description
The default configuration of Sambar Server 5 and earlier uses a symmetric key that is compiled into the binary program for encrypting passwords, which could allow local users to break all user passwords by cracking the key or modifying a copy of the sambar program to call the decryption procedure.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2001-1106
Credits & Attribution
No credits recorded in the NVD database.
References
More from sambar
View All →CVE-2006-6624
The FTP Server in Sambar Server 6.4 allows remote authenticated...
Medium
4
CVE-2005-3506
Cross-site scripting (XSS) vulnerability in proxy.asp in Sambar Server 6.3...
Medium
4.3
CVE-2004-2565
Multiple directory traversal vulnerabilities in Sambar Server 6.1 Beta 2...
Medium
5
CVE-2004-2564
Multiple cross-site scripting (XSS) vulnerabilities in Sambar Server 6.1 Beta...
Medium
4.3
CVE-2004-2086
Stack-based buffer overflow in results.stm for Sambar Server before the...
Medium
5
Affected Vendor
sambar
View all reports →Affected Software
sambar server
Vulnerable Versions:
4.1, 4.2.1_production, 4.3, 4.4, 5.0
Timeline
Official Publish:
April 2nd, 2003
Last Modified:
August 8th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.