Lucene search
Krzysztof DabrowskiCmd5checkpw
2 matches found
CVE-2005-0580
cmd5checkpw, when running setuid, does not properly drop privileges before calling the execvp function, which allows local users to read the poppasswd file.
2.1CVSS6.1AI score0.00064EPSS
CVE-2000-0990
cmd5checkpw 0.21 and earlier allows remote attackers to cause a denial of service via an "SMTP AUTH" command with an unknown username.
7.5CVSS7.2AI score0.00741EPSS