1005847vdb entry
http://securitytracker.com/id?1005847 CVE-2002-2219
CHETCPASSWD 1.12 - Shadow File Disclosure
Record summary
CVE-2002-2219 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
chetcpasswd.cgi in Pedro Lineu Orso chetcpasswd before 2.1 allows remote attackers to read the last line of the shadow file via a long user (userid) field.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBCHETCPASSWD 1.12 - Shadow File DisclosureExploitDB exploitby Victor PereiraNot analyzed1 file
References
6sourceforge.netConfirmation
http://sourceforge.net/project/shownotes.php?group_id=68912&release_id=466649 securiteam.com
http://www.securiteam.com/unixfocus/6C00N0K6AO.html 6472vdb entry
http://www.securityfocus.com/bid/6472 chetcpasswd-shadow-file-disclosure(10946)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/10946 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2002-2219