CVE-2001-1355: Buffer Overflow
First published: Fri Jul 20 2001(Updated: )
Buffer overflows in NetWin Authentication Module (NWAuth) 3.0b and earlier, as implemented in DMail, SurgeFTP, and possibly other packages, could allow attackers to execute arbitrary code via long arguments to (1) the -del command or (2) the -lookup command.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| NetWin dMail | =2.5d | |
| NetWin dMail | =2.7 | |
| NetWin dMail | =2.7q | |
| NetWin dMail | =2.7r | |
| NetWin dMail | =2.8e | |
| NetWin dMail | =2.8f | |
| NetWin dMail | =2.8g | |
| NetWin dMail | =2.8h | |
| NetWin dMail | =2.8i | |
| SurgeFTP | =1.0b | |
| SurgeFTP | =2.0a | |
| SurgeFTP | =2.0b |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2001-1355?
CVE-2001-1355 is considered a critical vulnerability due to the potential for arbitrary code execution.
How do I fix CVE-2001-1355?
To fix CVE-2001-1355, update affected software packages to the latest version provided by NetWin.
Which software versions are affected by CVE-2001-1355?
CVE-2001-1355 affects NetWin DMail versions 2.5d through 2.8e and SurgeFTP versions 1.0b and 2.0a.
What type of vulnerability is CVE-2001-1355?
CVE-2001-1355 is a buffer overflow vulnerability.
Can CVE-2001-1355 be exploited remotely?
Yes, CVE-2001-1355 can be exploited remotely via specially crafted arguments in specific command executions.
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/weakness
- agent/references
- agent/severity
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/netwin
- canonical/netwin dmail
- version/netwin dmail/2.8e
- version/netwin dmail/2.7q
- canonical/surgeftp
- version/surgeftp/1.0b
- version/netwin dmail/2.8g
- version/netwin dmail/2.8f
- version/surgeftp/2.0a
- version/netwin dmail/2.5d
- version/netwin dmail/2.7
- version/netwin dmail/2.8i
- version/netwin dmail/2.7r
- version/netwin dmail/2.8h
- version/surgeftp/2.0b