| Package | Affected versions | Patched versions |
|---|---|---|
| cmd5checkpw | = 0.20= 0.21= 0.22 |
cmd5checkpw, when running setuid, does not properly drop privileges before calling the execvp function, which allows local users to read the poppasswd file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free