CVE

Id
22783  
CVE No.
CVE-2006-6679  
Status
Candidate  
Description
Pedro Lineu Orso chetcpasswd before 2.4 relies on the X-Forwarded-For HTTP header when verifying a client"s status on an IP address ACL, which allows remote attackers to gain unauthorized access by spoofing this header.  
Phase
Assigned (20061221)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
220328 22783 CVE-2006-6679 BUGTRAQ:20061113 Chetcpasswd 2.x: multiple vulnerabilities  View
220329 22783 CVE-2006-6679 URL:http://marc.info/?l=bugtraq&m=116371297325564&w=2  View
220330 22783 CVE-2006-6679 MISC:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=394454  View
220331 22783 CVE-2006-6679 CONFIRM:http://sourceforge.net/project/shownotes.php?group_id=68912&release_id=466649  View
220332 22783 CVE-2006-6679 BID:21102  View
220333 22783 CVE-2006-6679 URL:http://www.securityfocus.com/bid/21102  View
220334 22783 CVE-2006-6679 OSVDB:30544  View
220335 22783 CVE-2006-6679 URL:http://www.osvdb.org/30544  View
220336 22783 CVE-2006-6679 SECUNIA:22967  View
220337 22783 CVE-2006-6679 URL:http://secunia.com/advisories/22967  View
220338 22783 CVE-2006-6679 XF:chetcpasswd-xforwardedfor-security-bypass(30451)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59519 JVNDB-2006-001785 Pedro Lineu Orso chetcpasswd におけるパスワードを特定される脆弱性 Pedro Lineu Orso chetcpasswd は、クライアント要求に対するレート制限を持っていないため、パスワードを特定される脆弱性が存在します。 CVE-2006-6681 22783 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001785.html  View