CVE-2001-0981

Published Jun 25, 2002 CVSS 2.0 · 10.0 Critical EPSS 2.5% KEV · Not listed
Description
HP CIFS/9000 Server (SAMBA) A.01.07 and earlier with the "unix password sync" option enabled calls the passwd program without specifying the username of the user making the request, which could cause the server to change the password of a different user.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2001-0963 HP CIFS/9000 Server (SAMBA) A.01.07 and earlier with the "unix password sync" option enabled calls the passwd program without specifying the username of the user making the request, which could cause the server to change the password of a different user.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 8, 2024, 4:37 AM
Reserved
Jan 31, 2002, 12:00 AM
Status
Modified
Published
Aug 31, 2001, 4:00 AM
Modified
Jun 16, 2026, 9:55 PM