CVE-2006-6685

Heap-based buffer overflow in Pedro Lineu Orso chetcpasswd 2.3.3 allows local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long REMOTE_ADDR environment variable. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

Score

CVSS 2.0 7.2 High

Status

Modified - cve@mitre.org

Published

2006-12-21

Last modified

2024-09-16

Weaknesses

CWE-119

Affected products

• Chetcpasswd (Pedro Lineu Orso)

References

• http://secunia.com/advisories/22967