high7.8
CVE-2006-6683
Pedro Lineu Orso chetcpasswd 2.4.1 and earlier verifies and updates user accounts via custom code that processes /etc/shadow and does not follow the PAM config…
Impact
Pedro Lineu Orso chetcpasswd 2.4.1 and earlier verifies and updates user accounts via custom code that processes /etc/shadow and does not follow the PAM configuration, which might allow remote attackers to bypass intended restrictions implemented through PAM.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pedro Lineu Orso | Chetcpasswd | through 2.4.1 Versions 1.12, 2.1, 2.2.1, 2.3.1, 2.3.3 |