VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 21, 2006· Updated Jun 16, 2026

CVE-2006-6685

CVE-2006-6685

Description

Heap-based buffer overflow in Pedro Lineu Orso chetcpasswd 2.3.3 allows local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long REMOTE_ADDR environment variable. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

2
  • Chetcpasswd/Chetcpasswd2 versions
    cpe:2.3:a:pedro_lineu_orso:chetcpasswd:2.3.3:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:pedro_lineu_orso:chetcpasswd:2.3.3:*:*:*:*:*:*:*
    • (no CPE)range: =2.3.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.