Chet · Chetcpasswd · CVE-2006-6683
Name of the Vulnerable Software and Affected Versions:
chetcpasswd versions 2.4.1 and earlier
Description:
The issue allows remote attackers to bypass intended restrictions implemented through PAM, as the custom code used to verify and update user accounts does not follow the PAM configuration. This is due to the custom code processing /etc/shadow.
Recommendations:
For versions 2.4.1 and earlier, consider modifying the custom code to adhere to the PAM configuration to prevent bypassing of intended restrictions. As a temporary workaround, restrict access to the /etc/shadow file to minimize the risk of exploitation.