Information Disclosure

libshadow.so is vulnerable to Information Disclosure. The vulnerability exists in changepasswd function at gpasswd.c because the password field is not properly zeroed out if the confirmation fails...

CVE-2004-0524

Buffer overflow in the chpasswd command in the Changepasswd plugin before 4.0, as used in SquirrelMail, allows local users to gain root privileges via a long user name...