CVE-2001-1359: Caldera Volution

High severity, CVSS 10.0. EPSS: 2.8% chance of exploitation in the next 30 days.

Volution clients 1.0.7 and earlier attempt to contact the computer creation daemon (CCD) when an LDAP authentication failure occurs, which allows remote attackers to fully control clients via a Trojan horse Volution server.

Affected products

• Caldera Volution: version 1.0 only; version 1.0.6 only; version 1.0.7 only

Published 2001-06-08. Last modified 2026-06-16.