← Back

Krzysztof Dabrowski

krzysztof_dabrowski

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Cmd5checkpw
cmd5checkpw

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Krzysztof Dabrowski
1Cmd5checkpw
Apr 16, 2026
Feb 25, 2005
N/A· v4
N/A· v3
2.1 LOW· v2
cmd5checkpw, when running setuid, does not properly drop privileges before calling the execvp function, which allows local users to read the poppasswd file.
1Krzysztof Dabrowski
1Cmd5checkpw
Sep 23, 2026
Dec 19, 2000
N/A· v4
N/A· v3
7.5 HIGH· v2
cmd5checkpw 0.21 and earlier allows remote attackers to cause a denial of service via an "SMTP AUTH" command with an unknown username.