Buffer overflow in Pedro Lineu Orso Chetcpasswd

CVE-2006-6684

Heap-based buffer overflow in Pedro Lineu Orso chetcpasswd before 2.4 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long X-Forwarded-For HTTP header. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

Vulnerability class: Buffer Overflow

EPSS: 0.029 (85.5th percentile) — read the EPSS interpretation.

Affected products

Pedro_lineu_orso Chetcpasswd — versions 2.3.1
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

cve@mitre.org (x_refsource_OSVDB, vdb-entry, Vendor Advisory)
cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (x_refsource_MISC, Vendor Advisory)