CVE-2005-0580
Low
Description
cmd5checkpw, when running setuid, does not properly drop privileges before calling the execvp function, which allows local users to read the poppasswd file.
SeverityLow
CVSS2.1
Exploit probability—
ProductKrzysztof Dabrowski Cmd5checkpw
PublishedFeb 25, 2005
First seenFeb 25, 2005
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| krzysztof_dabrowski cmd5checkpw | 0.20, 0.21, 0.22 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.