CVE-2005-3254: Nathan Neulinger Cgiwrap

High severity, CVSS 10.0. EPSS: 2.6% chance of exploitation in the next 30 days.

The CGIwrap program before 3.9 on Debian GNU/Linux uses an incorrect minimum value of 100 for a UID to determine whether it can perform a seteuid operation, which could allow attackers to execute code as other system UIDs that are greater than the minimum value, which should be 1000 on Debian systems.

Affected products

• Nathan Neulinger Cgiwrap: version 1.0 only; version 2.0 only; version 2.1 only; version 2.2 only; version 2.3 only; version 2.4 only; …

Published 2005-10-18. Last modified 2026-06-16.