VULNERABILITY INTELLIGENCE

CVE-2006-6680

CVSS score4.6 MEDIUM
EPSS probability0.32%
CISA KEVNot currently listed
Published2006-12-21
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:P

Description

Pedro Lineu Orso chetcpasswd before 2.3.1 does not document the need for 0400 permissions on /etc/chetcpasswd.allow, which might allow local users to gain sensitive information by reading this file.

Primary references