CVE-2004-0524 Buffer overflow in the chpasswd command in the Change_passwd plugin before 4.0, as used in SquirrelMail, allows local users to gain root privileges via a long user name.
HighCVSS 10.0
EPSS 4.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in the chpasswd command in the Change_passwd plugin before 4.0, as used in SquirrelMail, allows local users to gain root privileges via a long user name.
Affected products
No affected product data has been published yet.
References
- 20040417 Squirrelmail Chpasswod bof mailing-list
- 20040427 Re: Squirrelmail Chpasswod bof mailing-list
- 11415 third-party-advisory
- 10166 exploit patch vdb-entry vendor-advisory
- www.squirrelmail.org
- squirrelmail-chpasswd-binary-bo(15889) vdb-entry