CVE-2001-1291

CriticalCVSS 9.8/10Last modified Jun 16, 2026

Description

The telnet server for 3Com hardware such as PS40 SuperStack II does not delay or disconnect remote attackers who provide an incorrect username or password, which makes it easier to break into the server via brute force password guessing.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-307

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Jul 12, 2001
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2001

CVE-2001-12927.5Sambar Telnet Proxy/Server allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long password.CVE-2001-12935.0Buffer overflow in web server of 3com HomeConnect Cable Modem External with USB (#3CR29223) allows remote attackers to cause a denial of serCVE-2001-12945.0Buffer overflow in A-V Tronics Inetserv 3.2.1 and earlier allows remote attackers to cause a denial of service (crash) in the Webmail interfCVE-2001-12955.0Directory traversal vulnerability in Cerberus FTP Server 1.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) CVE-2001-12965.0More.groupware PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includeCVE-2001-12977.5PHP remote file inclusion vulnerability in Actionpoll PHP script before 1.1.2 allows remote attackers to execute arbitrary PHP code via a URCVE-2001-12985.0Webodex PHP script 1.0 and earlier allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets thCVE-2001-12995.0Zorbat Zorbstats PHP script before 0.9 allows remote attackers to include arbitrary files from remote web sites via an HTTP request that setCVE-2001-13005.0Directory traversal vulnerability in Dynu FTP server 1.05 and earlier allows remote attackers to read arbitrary files via a .. in the CD (CWCVE-2001-13011.2rcs2log, as used in Emacs 20.4, xemacs 21.1.10 and other versions before 21.4, and possibly other packages, allows local users to modify filCVE-2001-13022.1The change password option in the Windows Security interface for Windows 2000 allows attackers to use the option to attempt to change passwoCVE-2001-13035.0The default configuration of SecuRemote for Check Point Firewall-1 allows remote attackers to obtain sensitive configuration information for
CVE-2001-1291: Critical severity, CVSS 9.8 | Vulnix