CVE-2001-0981: Critical severity HP Cifs-9000 Server vulnerability

Q: What is the severity of CVE-2001-0981?

CVE-2001-0981 is considered to be high severity due to the potential for unauthorized password changes.

Q: How do I fix CVE-2001-0981?

To fix CVE-2001-0981, disable the 'unix password sync' option in HP CIFS/9000 Server configurations.

Q: What versions of HP CIFS/9000 Server are affected by CVE-2001-0981?

CVE-2001-0981 affects HP CIFS/9000 Server version A.01.07 and earlier.

Q: What could happen if CVE-2001-0981 is exploited?

If exploited, CVE-2001-0981 could allow attackers to change the passwords of different users inadvertently.

Q: Is there a workaround for CVE-2001-0981?

Yes, a workaround for CVE-2001-0981 includes turning off the 'unix password sync' feature until a permanent fix is applied.

Published Aug 31, 2001

Updated

HP CIFS/9000 Server (SAMBA) A.01.07 and earlier with the "unix password sync" option enabled calls the passwd program without specifying the username of the user making the request, which could cause the server to change the password of a different user.

Affected Software

1 affected component

HP Cifs-9000 Server<=a.01.07

Remediation

Patch Available

http://archives.neohapsis.com/archives/hp/2001-q3/0048.html

Event History

Aug 31, 2001

CVE Published

04:00 AM

Jun 25, 2002

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-0981?

CVE-2001-0981 is considered to be high severity due to the potential for unauthorized password changes.

How do I fix CVE-2001-0981?

To fix CVE-2001-0981, disable the 'unix password sync' option in HP CIFS/9000 Server configurations.

What versions of HP CIFS/9000 Server are affected by CVE-2001-0981?