CVE-2001-0981 | BDVDB-2026-4277 Detail

Description#

HP CIFS/9000 Server (SAMBA) A.01.07 and earlier with the "unix password sync" option enabled calls the passwd program without specifying the username of the user making the request, which could cause the server to change the password of a different user.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/7051
http://archives.neohapsis.com/archives/hp/2001-q3/0048.html

Exploit#

No public exploit known

History#

Version 12002-06-25Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.