Lucene search
MitreCVE-2001-0981HistoryJun 25, 2002 - 4:00 a.m.
CVE-2001-0981
2002-06-2504:00:00
mitre
web.nvd.nist.gov
30
hp server
cifs/9000
samba
unix password sync
cve-2001-0981
password change
nvd
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.1
Confidence
Low
EPSS
0.004
Percentile
73.5%
HP CIFS/9000 Server (SAMBA) A.01.07 and earlier with the “unix password sync” option enabled calls the passwd program without specifying the username of the user making the request, which could cause the server to change the password of a different user.
Affected configurations
Node
hpcifs-9000_serverRange≤a.01.07
| Vendor | Product | Version | CPE |
|---|---|---|---|
| hp | cifs-9000_server | * | cpe:2.3:a:hp:cifs-9000_server:*:*:*:*:*:*:*:* |
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.1
Confidence
Low
EPSS
0.004
Percentile
73.5%
Related for CVE-2001-0981