CVE-2001-1356

NetWin SurgeFTP 2.0f and earlier encrypts passwords using weak hashing, a fixed salt value and modulo 40 calculations, which allows remote attackers to conduct brute force password guessing attacks against the administrator account on port 7021.

• http://online.securityfocus.com/archive/1/201951Vendor Advisory
• http://www.iss.net/security_center/static/6961.phpVendor Advisory
• http://www.securityfocus.com/bid/3157Vendor Advisory
• http://online.securityfocus.com/archive/1/201951Vendor Advisory
• http://www.iss.net/security_center/static/6961.phpVendor Advisory
• http://www.securityfocus.com/bid/3157Vendor Advisory

Published

Aug 4, 2001

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2001-1350Cross-site scripting vulnerability in namazu.cgi for Namazu …
• CVE-2001-1351Cross-site scripting vulnerability in Namazu 2.0.8 and earli…
• CVE-2001-1352Cross-site scripting vulnerability in Namazu 2.0.9 and earli…
• CVE-2001-1353ghostscript before 6.51 allows local users to read and write…
• CVE-2001-1354NetWin Authentication module (NWAuth) 2.0 and 3.0b, as imple…
• CVE-2001-1355Buffer overflows in NetWin Authentication Module (NWAuth) 3.…
• CVE-2001-1357Multiple vulnerabilities in phpMyChat before 0.14.5 exist in…
• CVE-2001-1358Vulnerabilities in phpMyChat before 0.14.4 allow local and p…
• CVE-2001-1359Volution clients 1.0.7 and earlier attempt to contact the co…
• CVE-2001-1360Vulnerability in Scanner Access Now Easy (SANE) before 1.0.5…
• CVE-2001-1361Vulnerability in The Web Information Gateway (TWIG) 2.7.1, p…
• CVE-2001-1362Vulnerability in the server for nPULSE before 0.53p4.