Vulnerabilities > Sambar > Sambar Server > 4.2.1.production
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2001-07-25 | CVE-2001-1106 | Unspecified vulnerability in Sambar Server The default configuration of Sambar Server 5 and earlier uses a symmetric key that is compiled into the binary program for encrypting passwords, which could allow local users to break all user passwords by cracking the key or modifying a copy of the sambar program to call the decryption procedure. | 7.5 |