Unscored severity · published Jun 8, 2001
CVE-2001-1359
Volution clients 1.0.7 and earlier attempt to contact the computer creation daemon (CCD) when an LDAP authentication failure occurs, which allows remote attackers to fully control…
–
CVSS
2.8%
EPSS
No
On KEV
Description
Volution clients 1.0.7 and earlier attempt to contact the computer creation daemon (CCD) when an LDAP authentication failure occurs, which allows remote attackers to fully control clients via a Trojan horse Volution server.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.8% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VO
Volution · Caldera
1.0; 1.0.6; 1.0.7 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-1359
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-1359
Vendor Advisory
http://www.caldera.com/support/security/advisories/CSSA-2001-021.0.txt
Patch
http://www.securityfocus.com/bid/2850
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/6672