CVE-2006-6682: Chetcpasswd Project Chetcpasswd

Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days.

Pedro Lineu Orso chetcpasswd 2.3.3 provides a different error message when a request with a valid username fails, compared to a request with an invalid username, which allows remote attackers to determine valid usernames on the system.

Affected products

• Chetcpasswd Project Chetcpasswd: version 2.3.3 only

Published 2006-12-21. Last modified 2026-06-16.