Untrusted search path vulnerability in Pedro Lineu Orso chetcpasswd 2.4.1 and earlier allows local users to gain privileges via a modified PATH that references a malicious cp binary. NOTE: this issue might overlap CVE-2006-6639.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Chetcpasswd | Chetcpasswd | 2.3.1 (including) | 2.3.1 (including) |
| Chetcpasswd | Chetcpasswd | 2.3.3 (including) | 2.3.3 (including) |
| Chetcpasswd | Chetcpasswd | 2.4.1 (including) | 2.4.1 (including) |