Krzysztof Dabrowski Cmd5checkpw
2 CVEs affecting Krzysztof Dabrowski Cmd5checkpw. Latest disclosed: 2005-02-25. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2005-0580 | | 2005-02-25 | cmd5checkpw, when running setuid, does not properly drop privileges before calling the execvp function, which allows local users to read the poppasswd file. | |
CVE-2000-0990 | | 2000-12-19 | cmd5checkpw 0.21 and earlier allows remote attackers to cause a denial of service via an "SMTP AUTH" command with an unknown username. |