CVE-2005-0580

cmd5checkpw, when running setuid, does not properly drop privileges before calling the execvp function, which allows local users to read the poppasswd file

published February 27, 2005

CVSS
—
EPSS
0%
Percentile
23.4
In the wild
Unconfirmed
What it is

cmd5checkpw, when running setuid, does not properly drop privileges before calling the execvp function, which allows local users to read the poppasswd file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00318 · 23.4th percentile
Published
2005-02-27T05:00Z
EPSS history
Timeline
  • 27 FEB 05:00Z
    cmd5checkpw, when running setuid, does not properly drop privileges before calling the execvp function, which allows local users to read the poppasswd file
    cvelistv5