CVE-2006-6679

Pedro Lineu Orso chetcpasswd before 2.4 relies on the X-Forwarded-For HTTP header when verifying a client's status on an IP address ACL, which allows remote…

published December 21, 2006

CVSS
—
EPSS
2%
Percentile
81.6
In the wild
Unconfirmed
What it is

Pedro Lineu Orso chetcpasswd before 2.4 relies on the X-Forwarded-For HTTP header when verifying a client's status on an IP address ACL, which allows remote attackers to gain unauthorized access by spoofing this header.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02110 · 81.6th percentile
Published
2006-12-21T19:00Z
EPSS history
Timeline
  • 21 DEC 19:00Z
    Pedro Lineu Orso chetcpasswd before 2.4 relies on the X-Forwarded-For HTTP header when verifying a client's status on an IP address ACL, which allows remote…
    cvelistv5