Vulnerability in Pedro Lineu Orso Chetcpasswd

CVE-2006-6683

Pedro Lineu Orso chetcpasswd 2.4.1 and earlier verifies and updates user accounts via custom code that processes /etc/shadow and does not follow the PAM configuration, which might allow remote attackers to bypass intended restrictions implemented through PAM.

EPSS: 0.014 (69.5th percentile) — read the EPSS interpretation.

Affected products

Pedro_lineu_orso Chetcpasswd — versions 1.12, 2.1, 2.2.1
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (x_refsource_MISC, Vendor Advisory)