CVE-2015-0885 : checkpw 1.02 and earlier allows remote attackers to cause a denial of service (i

checkpw 1.02 and earlier allows remote attackers to cause a denial of service (infinite loop) via a -- (dash dash) in a username.

Published 2015-02-28 02:59:35

Updated 2025-04-12 10:46:41

Source JPCERT/CC

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2015-0885

Debian » Debian Linux » Version: 7.0
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
Matching versions
Checkpw Project » Checkpw
Versions up to, including, (<=) 1.02
cpe:2.3:a:checkpw_project:checkpw:*:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.89%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 74 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:N/A:P	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial

http://jvn.jp/en/jp/JVN34790526/995575/index.html

Japan Vulnerability Notes/Information from OHIRA, Shinya
Vendor Advisory
http://checkpw.sourceforge.net/checkpw/changes.txt
http://www.debian.org/security/2015/dsa-3192

Debian -- Security Information -- DSA-3192-1 checkpw
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000032

JVNDB-2015-000032 - JVN iPedia - 脆弱性対策情報データベース
Vendor Advisory
http://jvn.jp/en/jp/JVN34790526/index.html

JVN#34790526: checkpw vulnerable to denial-of-service (DoS)
Vendor Advisory

Jump to