CVE-2006-0331
Buffer overflow in Change passwd 3.1 (chpasswd) SquirrelMail plugin allows local users to execute...
CVE-2006-0331 is a medium vulnerability (CVSS 4.6) in Thiago Melo De Paula Change Passwd, published January 21, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.80%, the 56th percentile. No source names a fixed version.
Buffer overflow in Change passwd 3.1 (chpasswd) SquirrelMail plugin allows local users to execute arbitrary code via long command line arguments.
Exploit likelihood
What each source reports
NVD Score used
4.6
Buffer overflow in Change passwd 3.1 (chpasswd) SquirrelMail plugin allows local users to execute arbitrary code via long command line arguments.
- Record
CVE-2006-0331- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Buffer overflow in Change passwd 3.1 (chpasswd) SquirrelMail plugin allows local users to execute arbitrary code via long command line arguments.
- Record
CVE-2006-0331- Updated
- 2026-11-02
EUVDEUVD-2006-0338 No score
Buffer overflow in Change passwd 3.1 (chpasswd) SquirrelMail plugin allows local users to execute arbitrary code via long command line arguments.
- Record
EUVD-2006-0338- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xpcp-ch6h-733h No score
Buffer overflow in Change passwd 3.1 (chpasswd) SquirrelMail plugin allows local users to execute...
Buffer overflow in Change passwd 3.1 (chpasswd) SquirrelMail plugin allows local users to execute arbitrary code via long command line arguments.
- Record
GHSA-xpcp-ch6h-733h- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | SquirrelMail 3.1 - Change Passwd Plugin Local Buffer Overflow | 2006-01-25 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD |