Total vulnerabilities in the database
Pedro Lineu Orso chetcpasswd 2.4.1 and earlier verifies and updates user accounts via custom code that processes /etc/shadow and does not follow the PAM configuration, which might allow remote attackers to bypass intended restrictions implemented through PAM.
Software | From | Fixed in |
---|---|---|
pedro_lineu_orso / chetcpasswd | 2.2.1 | 2.2.1.x |
pedro_lineu_orso / chetcpasswd | 2.3.1 | 2.3.1.x |
pedro_lineu_orso / chetcpasswd | 2.3.3 | 2.3.3.x |
pedro_lineu_orso / chetcpasswd | - | 2.4.1.x |
pedro_lineu_orso / chetcpasswd | 2.1 | 2.1.x |
pedro_lineu_orso / chetcpasswd | 1.12 | 1.12.x |