{"id":"CVE-2001-1355","aliases":["EUVD-2001-1336","GHSA-h9f4-g4q9-45gx"],"status":"published","title":"Buffer overflows in NetWin Authentication Module (NWAuth) 3.0b and earlier, as implemented in...","description":"Buffer overflows in NetWin Authentication Module (NWAuth) 3.0b and earlier, as implemented in DMail, SurgeFTP, and possibly other packages, could allow attackers to execute arbitrary code via long arguments to (1) the -del command or (2) the -lookup command.","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.03565,"percentile":0.89422,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2001-07-20T04:00:00Z","modified":"2026-06-16T21:56:06Z","products":[{"vendor":"netwin","product":"dmail"},{"vendor":"netwin","product":"surgeftp"}],"references":[{"url":"http://www.securityfocus.com/bid/3077","tags":["vdb-entry","x_refsource_BID","x_transferred","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/198293","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6865","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2001-1355"},{"url":"https://github.com/advisories/GHSA-h9f4-g4q9-45gx"}],"sources":{"cve":[{"id":"CVE-2001-1355","description":"Buffer overflows in NetWin Authentication Module (NWAuth) 3.0b and earlier, as implemented in DMail, SurgeFTP, and possibly other packages, could allow attackers to execute arbitrary code via long arguments to (1) the -del command or (2) the -lookup command.","status":"published","published":"2002-06-11T04:00:00Z","modified":"2024-08-08T04:51:08.082Z","updated_at":"2026-11-02T14:34:42.354707Z"}],"euvd":[{"id":"EUVD-2001-1336","description":"Buffer overflows in NetWin Authentication Module (NWAuth) 3.0b and earlier, as implemented in DMail, SurgeFTP, and possibly other packages, could allow attackers to execute arbitrary code via long arguments to (1) the -del command or (2) the -lookup command.","status":"published","published":"2002-06-11T04:00:00Z","modified":"2024-08-08T04:51:08Z","updated_at":"2026-11-03T00:56:28.268448Z"}],"ghsa":[{"id":"GHSA-h9f4-g4q9-45gx","title":"Buffer overflows in NetWin Authentication Module (NWAuth) 3.0b and earlier, as implemented in...","description":"Buffer overflows in NetWin Authentication Module (NWAuth) 3.0b and earlier, as implemented in DMail, SurgeFTP, and possibly other packages, could allow attackers to execute arbitrary code via long arguments to (1) the -del command or (2) the -lookup command.","status":"published","published":"2022-04-30T18:17:51Z","modified":"2023-01-30T05:05:49Z","updated_at":"2026-11-02T14:47:21.568004Z"}],"nvd":[{"id":"CVE-2001-1355","description":"Buffer overflows in NetWin Authentication Module (NWAuth) 3.0b and earlier, as implemented in DMail, SurgeFTP, and possibly other packages, could allow attackers to execute arbitrary code via long arguments to (1) the -del command or (2) the -lookup command.","status":"published","published":"2001-07-20T04:00:00Z","modified":"2026-06-16T21:56:06.447Z","cvss":[{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:40.041412Z"}]}}