CVE-2001-1360: Vulnerability in Scanner Access Now Easy (SANE) before 1.0.5, related to pnm and saned.

Security readout for executives and security teams

A flaw in the open-source Scanner Access Now Easy (SANE) software affects versions before 1.0.5, specifically in components handling PNM image data and the saned network daemon. The public sources describe the issue only at a high level without detailing impact, so business risk cannot be quantified from the bundle alone. This is a legacy 2001-era issue and is unlikely to appear in modern environments. Exposure is limited to systems still running SANE versions older than 1.0.5, particularly Linux/Unix hosts exposing saned over the network. Modern distributions ship SANE far newer than 1.0.5, so real-world exposure today should be minimal outside abandoned or embedded legacy systems. Low priority for modern environments. Treat as a legacy hygiene item: verify no unsupported SANE installs remain, especially on network-exposed Linux/Unix scanning hosts. No evidence of active exploitation or KEV listing warrants urgent action. Mitigation focus: Upgrade SANE to 1.0.5 or later (current stable releases recommended) on any host still running the package.; Restrict saned network exposure with host firewall rules and bind only to trusted management interfaces.; Review vendor and distribution advisories for supported SANE builds and patch guidance..

Prepared

Jul 11, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.