Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Krzysztof Dabrowski Subscribe
Filtered by product Cmd5checkpw
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2000-0990 1 Krzysztof Dabrowski 1 Cmd5checkpw 2017-10-09 7.5 HIGH N/A
cmd5checkpw 0.21 and earlier allows remote attackers to cause a denial of service via an "SMTP AUTH" command with an unknown username.
CVE-2005-0580 1 Krzysztof Dabrowski 1 Cmd5checkpw 2008-09-05 2.1 LOW N/A
cmd5checkpw, when running setuid, does not properly drop privileges before calling the execvp function, which allows local users to read the poppasswd file.