CVE-2001-0645

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Symantec/AXENT NetProwler 3.5.x contains several default passwords, which could allow remote attackers to (1) access to the management tier via the "admin" password, or (2) connect to a MySQL ODBC from the management tier using a blank password.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2001-05/0097.htmlPatch, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2001-05/0098.htmlVendor Advisory
http://www.kb.cert.org/vuls/id/508387US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/6537
https://exchange.xforce.ibmcloud.com/vulnerabilities/6539
http://archives.neohapsis.com/archives/bugtraq/2001-05/0097.htmlPatch, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2001-05/0098.htmlVendor Advisory
http://www.kb.cert.org/vuls/id/508387US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/6537
https://exchange.xforce.ibmcloud.com/vulnerabilities/6539

Timeline

Published: Sep 20, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-06465.0Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 allows a remote attacker to perform a denial of service (hang) by creating a directory name of CVE-2001-06475.0Orange Web Server 2.1, based on GoAhead, allows a remote attacker to perform a denial of service via an HTTP GET request that does not inclu CVE-2001-06485.0Directory traversal vulnerability in PHProjekt 2.1 and earlier allows a remote attacker to conduct unauthorized activities via a dot dot (..CVE-2001-06495.0Personal Web Sharing 1.5.5 allows a remote attacker to cause a denial of service via a long HTTP request.CVE-2001-06505.0Cisco devices IOS 12.0 and earlier allow a remote attacker to cause a crash, or bad route updates, via malformed BGP updates with unrecogniz CVE-2001-06527.2Heap overflow in xlock in Solaris 2.6 through 8 allows local users to gain root privileges via a long (1) XFILESEARCHPATH or (2) XUSERFILESE CVE-2001-06534.6Sendmail 8.10.0 through 8.11.5, and 8.12.0 beta, allows local users to modify process memory and possibly gain privileges via a large value CVE-2001-06587.5Cross-site scripting (CSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause CVE-2001-06595.0Buffer overflow in IrDA driver providing infrared data exchange on Windows 2000 allows attackers who are physically close to the machine to CVE-2001-06605.0Outlook Web Access (OWA) in Microsoft Exchange 5.5, SP4 and earlier, allows remote attackers to identify valid user email addresses by direc CVE-2001-06625.0RPC endpoint mapper in Windows NT 4.0 allows remote attackers to cause a denial of service (loss of RPC services) via a malformed request.CVE-2001-06635.0Terminal Server in Windows NT and Windows 2000 allows remote attackers to cause a denial of service via a sequence of invalid Remote Desktop