← Database

CVE-2006-6682

MEDIUM CVSS: 5.0 Published: 2006-12-21 Modified: 2026-06-16

Description

Pedro Lineu Orso chetcpasswd 2.3.3 provides a different error message when a request with a valid username fails, compared to a request with an invalid username, which allows remote attackers to determine valid usernames on the system.

Affected Platforms

Chetcpasswd Project Chetcpasswd

Weakness Type

CWE-388

References