Description
Pedro Lineu Orso chetcpasswd 2.3.3 does not have a rate limit for client requests, which might allow remote attackers to determine passwords via a dictionary attack.
References
- chetcpasswd-password-weak-security(30455) vdb-entry
- 22967 third-party-advisory
- 21102 vdb-entry
- 20061113 Chetcpasswd 2.x: multiple vulnerabilities mailing-list
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=394454