CVE-2002-2221: Chetcpasswd

Medium severity, CVSS 6.2. EPSS: 0.3% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in Pedro Lineu Orso chetcpasswd 2.4.1 and earlier allows local users to gain privileges via a modified PATH that references a malicious cp binary. NOTE: this issue might overlap CVE-2006-6639.

Affected products

• Chetcpasswd Chetcpasswd: version 2.3.1 only; version 2.3.3 only; version 2.4.1 only

Published 2002-12-31. Last modified 2026-06-16.