Vulnerability Details CVE-2005-0002
poppassd_pam 1.0 and earlier, when changing a user password, does not verify that the user entered the old password correctly, which allows remote attackers to change passwords for arbitrary users.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 75.5%
CVSS Severity
CVSS v2 Score 10.0
References
Products affected by CVE-2005-0002
-
cpe:2.3:a:gentoo:poppassd_pam:-
-
cpe:2.3:a:gentoo:poppassd_pam:1.0