CVE-2005-0580
cmd5checkpw, when running setuid, does not properly drop privileges before calling the execvp function, which allows local users to read the poppasswd file.
Published: 2005-02-27 · CVSS: Unscored
cmd5checkpw, when running setuid, does not properly drop privileges before calling the execvp function, which allows local users to read the poppasswd file.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7