CVE-2001-1339

CriticalCVSS 9.8/10Last modified Jun 16, 2026

Description

Beck IPC GmbH IPC@CHIP telnet service does not delay or disconnect users from the service when bad passwords are entered, which makes it easier for remote attackers to conduct brute force password guessing attacks.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-307

Affected software

No affected versions have been published.

Timeline

Published: May 24, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-13405.0Beck GmbH IPC@Chip TelnetD service supports only one connection and does not disconnect a user who does not complete the login process, whic CVE-2001-13415.0The Beck GmbH IPC@Chip embedded web server installs the chipcfg.cgi program by default, which allows remote attackers to obtain sensitive ne CVE-2001-13425.0Apache before 1.3.20 on Windows and OS/2 systems allows remote attackers to cause a denial of service (GPF) via an HTTP request for a URI th CVE-2001-13437.5ws_mail.cgi in WebStore 400/400CS 4.14 allows remote authenticated WebStore administrators to execute arbitrary code via shell metacharacter CVE-2001-13447.5WSSecurity.pl in WebStore allows remote attackers to bypass authentication by providing the program with a filename that exists, which is ma CVE-2001-13454.6bctool in Jetico BestCrypt 0.7 and earlier trusts the user-supplied PATH to find and execute an fsck utility program, which allows local use CVE-2001-13461.2Computer Associates ARCserveIT 6.61 and 6.63 (also called ARCservIT) allows local users to overwrite arbitrary files via a symlink attack on CVE-2001-13474.6Windows 2000 allows local users to cause a denial of service and possibly gain privileges by setting a hardware breakpoint that is handled u CVE-2001-13487.5TWIG 2.6.2 and earlier allows remote attackers to perform unauthorized database operations via a SQL injection attack on the id parameter.CVE-2001-13493.7Sendmail before 8.11.4, and 8.12.0 before 8.12.0.Beta10, allows local users to cause a denial of service and possibly corrupt the heap and g CVE-2001-13507.5Cross-site scripting vulnerability in namazu.cgi for Namazu 2.0.7 and earlier allows remote attackers to execute arbitrary Javascript as oth CVE-2001-13517.5Cross-site scripting vulnerability in Namazu 2.0.8 and earlier allows remote attackers to execute arbitrary Javascript as other web users vi