CVE

Id
22786  
CVE No.
CVE-2006-6682  
Status
Candidate  
Description
Pedro Lineu Orso chetcpasswd 2.3.3 provides a different error message when a request with a valid username fails, compared to a request with an invalid username, which allows remote attackers to determine valid usernames on the system.  
Phase
Assigned (20061221)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
220347 22786 CVE-2006-6682 BUGTRAQ:20061113 Chetcpasswd 2.x: multiple vulnerabilities  View
220348 22786 CVE-2006-6682 URL:http://marc.info/?l=bugtraq&m=116371297325564&w=2  View
220349 22786 CVE-2006-6682 MISC:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=394454  View
220350 22786 CVE-2006-6682 BID:21102  View
220351 22786 CVE-2006-6682 URL:http://www.securityfocus.com/bid/21102  View
220352 22786 CVE-2006-6682 OSVDB:30545  View
220353 22786 CVE-2006-6682 URL:http://www.osvdb.org/30545  View
220354 22786 CVE-2006-6682 SECUNIA:22967  View
220355 22786 CVE-2006-6682 URL:http://secunia.com/advisories/22967  View
220356 22786 CVE-2006-6682 XF:chetcpasswd-error-message-enumeration(30454)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60357 JVNDB-2006-002623 Pedro Lineu Orso chetcpasswd におけるヒープベースのバッファオーバーフローの脆弱性 Pedro Lineu Orso chetcpasswd には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2006-6684 22786 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002623.html  View