CVE-2006-6683

Опубликовано: 21 дек. 2006

Источник: nvd

CVSS2: 7.8

EPSS Низкий

Описание

Pedro Lineu Orso chetcpasswd 2.4.1 and earlier verifies and updates user accounts via custom code that processes /etc/shadow and does not follow the PAM configuration, which might allow remote attackers to bypass intended restrictions implemented through PAM.

Ссылки

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=394454
Vendor Advisory
http://www.securityfocus.com/bid/21102
Vendor Advisory
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=394454
Vendor Advisory
http://www.securityfocus.com/bid/21102
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:pedro_lineu_orso:chetcpasswd:*:*:*:*:*:*:*:*

Версия до 2.4.1 (включая)

cpe:2.3:a:pedro_lineu_orso:chetcpasswd:1.12:*:*:*:*:*:*:*

cpe:2.3:a:pedro_lineu_orso:chetcpasswd:2.1:*:*:*:*:*:*:*

cpe:2.3:a:pedro_lineu_orso:chetcpasswd:2.2.1:*:*:*:*:*:*:*

cpe:2.3:a:pedro_lineu_orso:chetcpasswd:2.3.1:*:*:*:*:*:*:*

cpe:2.3:a:pedro_lineu_orso:chetcpasswd:2.3.3:*:*:*:*:*:*:*

EPSS

Процентиль: 41%

0.00187

Низкий

7.8 High

CVSS2

Дефекты

CWE-264

Связанные уязвимости

CVE-2006-6683

debian

около 19 лет назад

Pedro Lineu Orso chetcpasswd 2.4.1 and earlier verifies and updates us ...

GHSA-rqrq-c7rw-wmc4

github

почти 4 года назад