Security Advisory

CVE-2006-6683

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2006-12-21 19:00:00
Last updated 2024-09-16 23:30:26
Assigner mitre
State PUBLISHED

Description

Pedro Lineu Orso chetcpasswd 2.4.1 and earlier verifies and updates user accounts via custom code that processes /etc/shadow and does not follow the PAM configuration, which might allow remote attackers to bypass intended restrictions implemented through PAM.