cmd5checkpw, when running setuid, does not properly drop privileges before calling the execvp function, which allows local users to read the poppasswd file...
2.1CVSS6.5AI score0.00318EPSS
SaveExploits0References1
NVD•added 2005/02/25 5:00 a.m.•21 views
CVE-2005-0580
cmd5checkpw, when running setuid, does not properly drop privileges before calling the execvp function, which allows local users to read the poppasswd file...
