Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2006-6679

EPSS 1.61% · P82
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2006-6679

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Pedro Lineu Orso chetcpasswd before 2.4 relies on the X-Forwarded-For HTTP header when verifying a client's status on an IP address ACL, which allows remote attackers to gain unauthorized access by spoofing this header.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Pedro Lineu Orso chetcpasswd X-Forwarded-For HTTP报头欺骗未授权访问漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Pedro Lineu Orso chetcpasswd的2.4之前版本依赖X-Forwarded-For HTTP报头来验证客户端在IP地址ACL上的状态，远程攻击者可以通过欺骗报头来获取未授权访问。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2006-6679

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2006-6679

Please Login to view more intelligence information

Same Patch Batch · n/a · 2006-12-21 · 29 CVEs total

CVE-2006-6680Pedro Lineu Orso chetcpasswd 'chetcpasswd.allow'敏感信息泄露漏洞
CVE-2006-6678Netrik Textarea 'form-file.c' 任意命令执行漏洞
CVE-2006-6677NOD32 Anti-Virus .CHM文件计算错误漏洞
CVE-2006-6676NOD32 Anti-Virus多个文件解析安全漏洞
CVE-2006-6675Novell NetWare Welcome Web-App未明跨站脚本攻击漏洞
CVE-2006-6674Ozeki HTTP-SMS Gateway密码信息泄露漏洞
CVE-2006-6673WinFtp Server 长命令拒绝服务攻击
CVE-2006-6672Burak Yylmaz Download Portal SQL注入漏洞
CVE-2006-6671Burak Yilmaz Download Portal 'Down.ASP' SQL注入漏洞
CVE-2006-6685Pedro Lineu Orso chetcpasswd 栈缓冲区溢出漏洞
CVE-2006-6684Pedro Lineu Orso chetcpasswd HTTP报头缓冲区错误漏洞
CVE-2006-6683Chetcpasswd '/etc/shadow' 安全绕过漏洞
CVE-2006-6682Pedro Lineu Orso chetcpasswd 无效用户名请求安全信息泄露漏洞
CVE-2006-6681Pedro Lineu Orso chetcpasswd 密码暴力破解漏洞
CVE-2006-6686TextSend 'Sender.PHP'远程文件包含漏洞
CVE-2006-6104Mono XSP mod_mono模块目录遍历和源码信息泄露漏洞
CVE-2002-2221Chetcpasswd本地特权提升漏洞
CVE-2002-2220Pedro Lineu Orso chetcpasswd缓冲区溢出漏洞
CVE-2002-2219Chpasswd可远程访问敏感文件漏洞
CVE-2006-6695Carsen Klock TextSend 'index.php'多个跨站脚本攻击漏洞

Showing top 20 of 29 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2006-6679

No comments yet

Leave a comment