PatchTheCVEchetcpasswd vulnerabilities
Recent CVEs affecting chetcpasswd products. 6 tracked.
chetcpasswd has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2006-12-21. Highest priority: CVE-2002-2219 (score 55/100).
- CVE-2006-6681 HIGH 7.5 DOWNGRADE Pedro Lineu Orso chetcpasswd 2.3.3 does not have a rate limit for client requests, which might allow remote at
- CVE-2006-6680 MEDIUM 4.6 DOWNGRADE Pedro Lineu Orso chetcpasswd before 2.3.1 does not document the need for 0400 permissions on /etc/chetcpasswd.
- CVE-2006-6639 MEDIUM 4.6 DOWNGRADE Multiple unspecified vulnerabilities in chetcpasswd 2.4.1 allow local users to gain privileges via unspecified
- CVE-2002-2221 MEDIUM 6.2 DOWNGRADE Untrusted search path vulnerability in Pedro Lineu Orso chetcpasswd 2.4.1 and earlier allows local users to ga
- CVE-2002-2220 MEDIUM 6.2 DOWNGRADE Buffer overflow in Pedro Lineu Orso chetcpasswd before 1.12, when configured for access from 0.0.0.0, allows l
- CVE-2002-2219 HIGH 7.5 DOWNGRADE chetcpasswd.cgi in Pedro Lineu Orso chetcpasswd before 2.1 allows remote attackers to read the last line of th
FAQ
How do I fix chetcpasswd vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is chetcpasswd being exploited right now?
None of the tracked chetcpasswd CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which chetcpasswd CVE should I patch first?
CVE-2002-2219 currently ranks highest (55/100): chetcpasswd.cgi in Pedro Lineu Orso chetcpasswd before 2.1 allows remote attackers to read the last line of th.