CVE:CVE-2006-6679
CNNVD:CNNVD-200612-480
Pedro Lineu Orso chetcpasswd的2.4之前版本依赖X-Forwarded-For HTTP报头来验证客户端在IP地址ACL上的状态，远程攻击者可以通过欺骗报头来获取未授权访问。
solution:Upgrade pedro_lineu_orso chetcpasswd to a higher version than 2.3.3,1.12,2.1,2.2.1,2.3.1,and avoid the version (,2.3.3],1.12,2.1,2.2.1,2.3.1