chetcpasswd vulnerabilities and fixes

Recent CVEs affecting chetcpasswd, with upgrade or downgrade steps. 11 tracked.

chetcpasswd has 11 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2006-12-21. Highest priority: CVE-2002-2219 (score 55/100).

• CVE-2006-6685 HIGH 7.2 DOWNGRADE Heap-based buffer overflow in Pedro Lineu Orso chetcpasswd 2.3.3 allows local users to cause a denial of servi
• CVE-2006-6684 HIGH 7.5 UPGRADE Heap-based buffer overflow in Pedro Lineu Orso chetcpasswd before 2.4 allows remote attackers to cause a denia
• CVE-2006-6683 HIGH 7.8 UPGRADE Pedro Lineu Orso chetcpasswd 2.4.1 and earlier verifies and updates user accounts via custom code that process
• CVE-2006-6682 MEDIUM 5.0 DOWNGRADE Pedro Lineu Orso chetcpasswd 2.3.3 provides a different error message when a request with a valid username fai
• CVE-2006-6681 HIGH 7.5 DOWNGRADE Pedro Lineu Orso chetcpasswd 2.3.3 does not have a rate limit for client requests, which might allow remote at
• CVE-2006-6680 MEDIUM 4.6 DOWNGRADE Pedro Lineu Orso chetcpasswd before 2.3.1 does not document the need for 0400 permissions on /etc/chetcpasswd.
• CVE-2006-6679 HIGH 7.5 UPGRADE Pedro Lineu Orso chetcpasswd before 2.4 relies on the X-Forwarded-For HTTP header when verifying a client's st
• CVE-2006-6639 MEDIUM 4.6 DOWNGRADE Multiple unspecified vulnerabilities in chetcpasswd 2.4.1 allow local users to gain privileges via unspecified
• CVE-2002-2221 MEDIUM 6.2 DOWNGRADE Untrusted search path vulnerability in Pedro Lineu Orso chetcpasswd 2.4.1 and earlier allows local users to ga
• CVE-2002-2220 MEDIUM 6.2 DOWNGRADE Buffer overflow in Pedro Lineu Orso chetcpasswd before 1.12, when configured for access from 0.0.0.0, allows l
• CVE-2002-2219 HIGH 7.5 DOWNGRADE chetcpasswd.cgi in Pedro Lineu Orso chetcpasswd before 2.1 allows remote attackers to read the last line of th

FAQ

How do I fix chetcpasswd vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is chetcpasswd being exploited right now?

None of the tracked chetcpasswd CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which chetcpasswd CVE should I patch first?

CVE-2002-2219 currently ranks highest (55/100): chetcpasswd.cgi in Pedro Lineu Orso chetcpasswd before 2.1 allows remote attackers to read the last line of th.

RSS feed for chetcpasswd · ← Back to latest CVEs