# CVE-2001-1354

## Summary

- **CVE ID:** CVE-2001-1354
- **Severity:** UNKNOWN
- **CVSS Score:** 0.02
- **CWE:** N/A
- **Published:** Jun 11, 2002
- **Last Modified:** Mar 16, 2026

## Description

NetWin Authentication module (NWAuth) 2.0 and 3.0b, as implemented in SurgeFTP, DMail, and possibly other packages, uses weak password hashing, which could allow local users to decrypt passwords or use a different password that has the same hash value as the correct password.

## Affected Products

- n/a — n/a (n/a)

## References

- [CNA](https://exchange.xforce.ibmcloud.com/vulnerabilities/6866)
- [CNA](http://www.securityfocus.com/bid/3075)
- [CNA](http://online.securityfocus.com/archive/1/198293)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.38%
- **EPSS Percentile:** 58.7

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-18._