CVE-2004-0524

High severity, CVSS 10.0. EPSS: 4.6% chance of exploitation in the next 30 days.

Buffer overflow in the chpasswd command in the Change_passwd plugin before 4.0, as used in SquirrelMail, allows local users to gain root privileges via a long user name.

Published 2004-08-06. Last modified 2026-06-16.