CVE-2005-0002

Published: May 2, 2005Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

poppassd_pam 1.0 and earlier, when changing a user password, does not verify that the user entered the old password correctly, which allows remote attackers to change passwords for arbitrary users.

Affected (1)

Products: Gentoo: Poppassd Pam

Gentoo

1 product

Poppassd Pam

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gentoo Poppassd Pam	Up to 1.0

References (6)

http://secunia.com/advisories/13865

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200501-22.xml

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1012840

Source: cve@mitre.org

http://secunia.com/advisories/13865

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-200501-22.xml

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securitytracker.com/id?1012840

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.