CVE-2001-1356 Information

Description

NetWin SurgeFTP 2.0f and earlier encrypts passwords using weak hashing a fixed salt value and modulo 40 calculations which allows remote attackers to conduct brute force password guessing attacks against the administrator account on port 7021.

Reference

http://online.securityfocus.com/archive/1/201951 http://www.iss.net/security_center/static/6961.php http://www.securityfocus.com/bid/3157