CVE-2005-0002
poppassd_pam 1.0 and earlier, when changing a user password, does not verify that the user...
CVE-2005-0002 is a high vulnerability (CVSS 10.0) in Gentoo Poppassd Pam, published January 19, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.44%, the 84th percentile. No source names a fixed version.
poppassd_pam 1.0 and earlier, when changing a user password, does not verify that the user entered the old password correctly, which allows remote attackers to change passwords for arbitrary users.
Exploit likelihood
What each source reports
NVD Score used
poppassd_pam 1.0 and earlier, when changing a user password, does not verify that the user entered the old password correctly, which allows remote attackers to change passwords for arbitrary users.
- Record
CVE-2005-0002- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
poppassd_pam 1.0 and earlier, when changing a user password, does not verify that the user entered the old password correctly, which allows remote attackers to change passwords for arbitrary users.
- Record
CVE-2005-0002- Updated
- 2026-11-02
EUVDEUVD-2005-0003 No score
poppassd_pam 1.0 and earlier, when changing a user password, does not verify that the user entered the old password correctly, which allows remote attackers to change passwords for arbitrary users.
- Record
EUVD-2005-0003- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-547x-rqh9-jrg8 No score
poppassd_pam 1.0 and earlier, when changing a user password, does not verify that the user...
poppassd_pam 1.0 and earlier, when changing a user password, does not verify that the user entered the old password correctly, which allows remote attackers to change passwords for arbitrary users.
- Record
GHSA-547x-rqh9-jrg8- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |