CHETCPASSWD Shadow File Disclosure Vulnerability

Bugtraq ID:	6472
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 22 2002 12:00AM
Updated:	Dec 22 2002 12:00AM
Credit:	Discovery of this issue is credited to Victor Pereira.
Vulnerable:	CHETCPASSWD CHETCPASSWD 1.12
Not Vulnerable:	CHETCPASSWD CHETCPASSWD 1.12.1

CHETCPASSWD Shadow File Disclosure Vulnerability

CHETCPASSWD is prone to a vulnerability that may potentially cause the tail end of the local shadow file to be disclosed to a remote attacker.

It is possible to exploit this issue by sending an overly long string as a value for the 'user' URI parameter in a request to the 'chetcpasswd.cgi'.

CHETCPASSWD Shadow File Disclosure Vulnerability

The following exploit was provided:

• /data/vulnerabilities/exploits/chetcpassword-exploit.pl

CHETCPASSWD Shadow File Disclosure Vulnerability

Solution:
The vendor has released an update to address this issue, affected users are advised to download and apply the upgrade as soon as possible.


CHETCPASSWD CHETCPASSWD 1.12

• CHETCPASSWD chetcpasswd-1.12.1.tar.gz
  http://web.onda.com.br/orso/chetcpasswd-1.12.1.tar.gz

CHETCPASSWD Shadow File Disclosure Vulnerability

References:

• CHETCPASSWD Homepage (CHETCPASSWD)
  
• chetcpasswd.cgi Multiple Vulnerabilities (Securiteam)