CVE-2006-6681 - Pedro Lineu Orso chetcpasswd 2.3.3 does not have a rate limit for client requests, which might allow remote attackers to determine passwords via a dictionary attack

Back Back to CVE browser

HIGH

Pedro Lineu Orso chetcpasswd 2.3.3 does not have a rate limit for client requests, which might allow remote attackers to determine passwords via a dictionary attack

Published Dec 21, 2006

7.5

HIGH

CVSS 2.0

EPSS 1.48%

Description

Pedro Lineu Orso chetcpasswd 2.3.3 does not have a rate limit for client requests, which might allow remote attackers to determine passwords via a dictionary attack.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-399

References (5)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=394454
x_refsource_MISCPatch
http://marc.info/?l=bugtraq&m=116371297325564&w=2
mailing-listx_refsource_BUGTRAQMailing List
http://secunia.com/advisories/22967
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/21102
vdb-entryx_refsource_BIDVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/30455
vdb-entryx_refsource_XF

Link	Providers	Tags
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=394454		x_refsource_MISCPatch
http://marc.info/?l=bugtraq&m=116371297325564&w=2		mailing-listx_refsource_BUGTRAQMailing List
http://secunia.com/advisories/22967		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/21102		vdb-entryx_refsource_BIDVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/30455		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Dec 21, 2006

Updated Aug 7, 2024

Reserved Dec 21, 2006

Link CVE-2006-6681

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-6681

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-6681