Buffer Overflow Vulnerability in NetWin Authentication Module Affects DMail and SurgeFTP
CVE-2001-1355
Currently unrated
What is CVE-2001-1355?
The NetWin Authentication Module (NWAuth) versions 3.0b and earlier are susceptible to buffer overflow vulnerabilities. Attackers can exploit this issue by sending specially crafted long arguments to the -del or -lookup commands, potentially allowing them to execute arbitrary code on the affected systems. This vulnerability poses a significant risk to systems utilizing DMail, SurgeFTP, and possibly other packages relying on this authentication module.
References
Timeline
Vulnerability Reserved
Vulnerability published