CVE-2005-0580: Krzysztof Dabrowski CMD5CHECKPW

Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days.

cmd5checkpw, when running setuid, does not properly drop privileges before calling the execvp function, which allows local users to read the poppasswd file.

Affected products

• Krzysztof Dabrowski CMD5CHECKPW: version 0.20 only; version 0.21 only; version 0.22 only

Published 2005-02-25. Last modified 2026-06-16.