medium4.6Public exploit code
CVE-2006-0331
Buffer overflow in Change passwd 3.1 (chpasswd) SquirrelMail plugin allows local users to execute arbitrary code via long command line arguments.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SquirrelMail 3.1 - Change Passwd Plugin Local Buffer Overflow2006-01-25 · local · linux · Verified
Impact
Buffer overflow in Change passwd 3.1 (chpasswd) SquirrelMail plugin allows local users to execute arbitrary code via long command line arguments.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Thiago Melo De Paula | Change Passwd | Version 3.1 |
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/363
- http://www.securityfocus.com/archive/1/422414/100/0/threaded
- http://www.squirrelmail.org/plugin_view.php?id=117
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24258
- http://securityreason.com/securityalert/363
- http://www.securityfocus.com/archive/1/422414/100/0/threaded
- http://www.squirrelmail.org/plugin_view.php?id=117
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24258