Krzysztof Dabrowski Cmd5checkpw — known CVE vulnerabilities

Every CVE whose affected-product data names Krzysztof Dabrowski Cmd5checkpw, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2000-0990 — CVSS 7.5 (high): cmd5checkpw 0.21 and earlier allows remote attackers to cause a denial of service via an "SMTP AUTH" command with an unknown username.
• CVE-2005-0580 — CVSS 2.1 (low): cmd5checkpw, when running setuid, does not properly drop privileges before calling the execvp function, which allows local users to read…