← Database

CVE-2005-0580

LOW CVSS: 2.1 Published: 2005-02-25 Modified: 2026-06-16

Description

cmd5checkpw, when running setuid, does not properly drop privileges before calling the execvp function, which allows local users to read the poppasswd file.

Affected Platforms

Krzysztof Dabrowski Cmd5Checkpw

Weakness Type

NVD-CWE-Other

References