CVE-2006-6683

Published: Dec 21, 2006Modified: Apr 23, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

Pedro Lineu Orso chetcpasswd 2.4.1 and earlier verifies and updates user accounts via custom code that processes /etc/shadow and does not follow the PAM configuration, which might allow remote attackers to bypass intended restrictions implemented through PAM.

Affected (6)

Products: Pedro Lineu Orso: Chetcpasswd

Pedro Lineu Orso

1 product

Chetcpasswd

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Pedro Lineu Orso Chetcpasswd	Up to 2.4.1
Pedro Lineu Orso Chetcpasswd	Version 1.12
Pedro Lineu Orso Chetcpasswd	Version 2.1
Pedro Lineu Orso Chetcpasswd	Version 2.2.1
Pedro Lineu Orso Chetcpasswd	Version 2.3.1
Pedro Lineu Orso Chetcpasswd	Version 2.3.3

Related CWEs

CWE-264

References (4)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=394454

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/21102

Source: cve@mitre.org

Vendor Advisory

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=394454

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/21102

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.