CVE-2006-6679

HIGH 7.5CVE-2006-6679 · Published 21/12/2006 · updated 16/06/2026

In short

CVE-2006-6679 is a HIGH (CVSS 7.5) vulnerability affecting chetcpasswd (chetcpasswd project).
Chance of exploitation in the next 30 days (EPSS): 2.1%, higher than 81.9% of all vulnerabilities.
Fix: update to 2.4 or later.

Package	Affected versions	Patched versions
chetcpasswd chetcpasswd_project	`< 2.4`	`2.4`

Description

Pedro Lineu Orso chetcpasswd before 2.4 relies on the X-Forwarded-For HTTP header when verifying a client's status on an IP address ACL, which allows remote attackers to gain unauthorized access by spoofing this header.

References

bugs.debian.org/cgi-bin/bugreport.cgi · Mailing List
marc.info · Mailing List
secunia.com/advisories/22967 · Broken Link
sourceforge.net/project/shownotes.php · Product
osvdb.org/30544 · Broken Link
securityfocus.com/bid/21102 · Broken Link
exchange.xforce.ibmcloud.com/vulnerabilities/30451 · Third Party Advisory

More vulnerabilities in chetcpasswd

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free