CVE-2005-0002: Critical severity Gentoo Poppassd Pam vulnerability
poppassdpam 1.0 and earlier, when changing a user password, does not verify that the user entered the old password correctly, which allows remote attackers to change passwords for arbitrary users.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-0002?
CVE-2005-0002 is classified as a high severity vulnerability due to its potential for allowing unauthorized password changes.
How do I fix CVE-2005-0002?
To fix CVE-2005-0002, upgrade poppassd_pam to version 1.1 or later, which includes the necessary verification functionality.
What systems are affected by CVE-2005-0002?
CVE-2005-0002 affects poppassd_pam versions 1.0 and earlier, particularly in Gentoo Linux distributions.
Can CVE-2005-0002 be exploited remotely?
Yes, CVE-2005-0002 can be exploited remotely by attackers due to inadequate password verification during changes.
What are the consequences of CVE-2005-0002 being exploited?
Exploitation of CVE-2005-0002 allows attackers to change passwords for arbitrary users, compromising account security.