| Package | Affected versions | Patched versions |
|---|---|---|
| chetcpasswd | = 1.12= 2.1= 2.2.1= 2.3.1= 2.3.3≤ 2.4.1 |
Pedro Lineu Orso chetcpasswd 2.4.1 and earlier verifies and updates user accounts via custom code that processes /etc/shadow and does not follow the PAM configuration, which might allow remote attackers to bypass intended restrictions implemented through PAM.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free