The chpasswd binary plugin version 3.x that comes with SquirrelMail is susceptible to a buffer overflow.
51bed8c4cf3edfac90f26c1ed8d63cd3bf848fa26f97b3022a5c47a95bfe5974
Local root exploit for Squirrelmail's chpasswd utility. Tested on GNU/Debian with kernel 2.4.24 and on RH 9.0 shrike with kernel 2.4.20. Original bug found by Matias Neiff.
6157a4eb97ac74cc3337b905b33aa88c26ff87f621b2f36ac1cf440cdd4a4aad
Local root exploit for Squirrelmail's chpasswd utility. Tested on Suse 9. Original bug found by Matias Neiff.
2b92773c507dec11bb83386fb30b5c4db547be150a75c00aec35583c53feee1b
Local root exploit for Squirrelmail's chpasswd utility. Original bug found by Matias Neiff.
3c36b2150910beb2509306f98b2cb97e6805d8171120ac5902aad390be155c8d