CVE-2006-6684: Pedro Lineu Orso Chetcpasswd

High severity, CVSS 7.5. EPSS: 3% chance of exploitation in the next 30 days.

Heap-based buffer overflow in Pedro Lineu Orso chetcpasswd before 2.4 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long X-Forwarded-For HTTP header. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

• Pedro Lineu Orso Chetcpasswd: up to and including 2.3.3; version 2.3.1 only

Published 2006-12-21. Last modified 2026-06-16.