PT-2002-2932 · Chet · Chetcpasswd

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-2220

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Medium

Base vector

AV:L/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: chetcpasswd versions prior to 1.12

Description: A buffer overflow issue exists when chetcpasswd is configured for access from 0.0.0.0, allowing local users to gain privileges via unspecified vectors.

Recommendations: For versions prior to 1.12, update to version 1.12 or later to resolve the issue. As a temporary workaround, consider restricting access to only necessary IP addresses instead of 0.0.0.0 to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2002-2220

Affected Products

Chetcpasswd

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2002-2220 · Security Note
• http://sourceforge.net/project/shownotes.php?group_id=68912&release_id=466649 · Vendor Advisory