CVE-2001-1106: Sambar Server

High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days.

The default configuration of Sambar Server 5 and earlier uses a symmetric key that is compiled into the binary program for encrypting passwords, which could allow local users to break all user passwords by cracking the key or modifying a copy of the sambar program to call the decryption procedure.

Affected products

• Sambar Sambar Server: version 4.1 only; version 4.2.1_production only; version 4.3 only; version 4.4 only; version 5.0 only

Published 2001-07-25. Last modified 2026-06-16.