Exploitation Summary
EIP tracks 1 public exploit for CVE-2001-1354. PoCs published by byterage.
AI-analyzed exploit summary This exploit is a password cracker for the Netwin Authentication Module (NWAuth), which uses a weak one-way hash function. It brute-forces encrypted passwords found in admin.dat and nwauth.clg files by leveraging the predictable encryption scheme.
Description
NetWin Authentication module (NWAuth) 2.0 and 3.0b, as implemented in SurgeFTP, DMail, and possibly other packages, uses weak password hashing, which could allow local users to decrypt passwords or use a different password that has the same hash value as the correct password.
Exploits (1)
This exploit is a password cracker for the Netwin Authentication Module (NWAuth), which uses a weak one-way hash function. It brute-forces encrypted passwords found in admin.dat and nwauth.clg files by leveraging the predictable encryption scheme.