CVE-2005-0002

poppassd_pam 1.0 and earlier, when changing a user password, does not verify that the user entered the old password correctly, which allows remote attackers to change passwords for arbitrary users.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2005-05-02

Last modified

2024-08-07

Affected products

• Poppassd Pam (Gentoo)

References

• http://secunia.com/advisories/13865
• http://security.gentoo.org/glsa/glsa-200501-22.xml
• http://securitytracker.com/id?1012840