Filtered by vendor Chetcpasswd Project
Subscribe
Total
2 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2006-6682 | 1 Chetcpasswd Project | 1 Chetcpasswd | 2024-11-21 | 5.0 MEDIUM | N/A |
| Pedro Lineu Orso chetcpasswd 2.3.3 provides a different error message when a request with a valid username fails, compared to a request with an invalid username, which allows remote attackers to determine valid usernames on the system. | |||||
| CVE-2006-6679 | 1 Chetcpasswd Project | 1 Chetcpasswd | 2024-11-21 | 7.5 HIGH | 7.5 HIGH |
| Pedro Lineu Orso chetcpasswd before 2.4 relies on the X-Forwarded-For HTTP header when verifying a client's status on an IP address ACL, which allows remote attackers to gain unauthorized access by spoofing this header. | |||||