CVE-2006-6680: Chetcpasswd

Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days.

Pedro Lineu Orso chetcpasswd before 2.3.1 does not document the need for 0400 permissions on /etc/chetcpasswd.allow, which might allow local users to gain sensitive information by reading this file.

Affected products

• Chetcpasswd Chetcpasswd: version 2.2.1 only

Published 2006-12-21. Last modified 2026-06-16.