Lucene search
HistoryFeb 25, 2005 - 5:00 a.m.
CVE-2005-0580
cve-2005-0580
cmd5checkpw
setuid
privilege escalation
nvd
6.3 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
0.0004 Low
EPSS
Percentile
5.3%
cmd5checkpw, when running setuid, does not properly drop privileges before calling the execvp function, which allows local users to read the poppasswd file.
Related
nessus
nessus
GLSA-200502-30 : cmd5checkpw: Local password leak vulnerability
2005-03-01 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200502-30 (cmd5checkpw)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200502-30 (cmd5checkpw)
2008-09-24 00:00:00
gentoo
gentoo
cmd5checkpw: Local password leak vulnerability
2005-02-25 00:00:00
6.3 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
0.0004 Low
EPSS
Percentile
5.3%
Related for CVE-2005-0580