SurgeFTP Weak Password Encryption Vulnerability

Bugtraq ID:	3157
Class:	Design Error
CVE:	CVE-2001-1356
Remote:	Yes
Local:	No
Published:	Aug 04 2001 12:00AM
Updated:	Jul 11 2009 07:56AM
Credit:	Discovered by ByteRage <byterage@yahoo.com>.
Vulnerable:	NetWin SurgeFTP 2.0 f - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 NetWin SurgeFTP 2.0 e - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 NetWin SurgeFTP 2.0 d - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 NetWin SurgeFTP 2.0 c - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 NetWin SurgeFTP 2.0 b - Debian Linux 2.2 - Mandriva Linux Mandrake 7.2 - Microsoft Windows 2000 Professional - Microsoft Windows 98 - Microsoft Windows NT 4.0 - RedHat Linux 7.0 - S.u.S.E. Linux 7.0 - Sun Solaris 8_sparc - Sun Solaris 7.0 NetWin SurgeFTP 2.0 a - Debian Linux 2.2 - Mandriva Linux Mandrake 7.2 - Microsoft Windows 2000 Professional - Microsoft Windows 98 - Microsoft Windows NT 4.0 - RedHat Linux 7.0 - S.u.S.E. Linux 7.0 - Sun Solaris 8_sparc - Sun Solaris 7.0

Not Vulnerable: