CVE-2001-0981

critical HPE
CVSS v3 Base Score
10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS Score
0.4%
Exploitation probability in 30 days
Top 40% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Confidentiality
C
Integrity
C
Availability
C
Published: August 31, 2001 (9022 days ago)
Last Modified: April 16, 2026
Vendor: HPE
Source: NVD

Description

HP CIFS/9000 Server (SAMBA) A.01.07 and earlier with the "unix password sync" option enabled calls the passwd program without specifying the username of the user making the request, which could cause the server to change the password of a different user.

CWE

NVD-CWE-Other

Affected Products

hp cifs-9000 server

References

🔗 archives.neohapsis.com 🔗 exchange.xforce.ibmcloud.com 🔗 archives.neohapsis.com 🔗 exchange.xforce.ibmcloud.com