Vulnerability Details CVE-2006-6683
Pedro Lineu Orso chetcpasswd 2.4.1 and earlier verifies and updates user accounts via custom code that processes /etc/shadow and does not follow the PAM configuration, which might allow remote attackers to bypass intended restrictions implemented through PAM.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 36.0%
CVSS Severity
CVSS v2 Score 7.8
References
Products affected by CVE-2006-6683
-
cpe:2.3:a:pedro_lineu_orso:chetcpasswd:1.12
-
cpe:2.3:a:pedro_lineu_orso:chetcpasswd:2.1
-
cpe:2.3:a:pedro_lineu_orso:chetcpasswd:2.2.1
-
cpe:2.3:a:pedro_lineu_orso:chetcpasswd:2.3.1
-
cpe:2.3:a:pedro_lineu_orso:chetcpasswd:2.3.3