chetcpasswd

Top products

The 6 most recently published vulnerabilities affecting chetcpasswd.

• CVE-2006-6681Pedro Lineu Orso chetcpasswd 2.3.3 does not have a rate limit for client requests, which might allow remote attackers to determine passwords via a dictionary attack.7.5Dec 21, 2006
• CVE-2006-6680Pedro Lineu Orso chetcpasswd before 2.3.1 does not document the need for 0400 permissions on /etc/chetcpasswd.allow, which might allow local users to gain sensitive information by reading this file.4.6Dec 21, 2006
• CVE-2002-2221Untrusted search path vulnerability in Pedro Lineu Orso chetcpasswd 2.4.1 and earlier allows local users to gain privileges via a modified PATH that references a malicious cp binary. NOTE: this is...6.2Dec 21, 2006
• CVE-2002-2219chetcpasswd.cgi in Pedro Lineu Orso chetcpasswd before 2.1 allows remote attackers to read the last line of the shadow file via a long user (userid) field.7.5Dec 21, 2006
• CVE-2002-2220Buffer overflow in Pedro Lineu Orso chetcpasswd before 1.12, when configured for access from 0.0.0.0, allows local users to gain privileges via unspecified vectors.6.2Dec 21, 2006
• CVE-2006-6639Multiple unspecified vulnerabilities in chetcpasswd 2.4.1 allow local users to gain privileges via unspecified vectors related to executing (1) the cp program, (2) the mail program, or (3) the prog...4.6Dec 19, 2006