the call to
system() looks fine. The first thing that pops into my mind is: are you running the script as root? if not, do you have it setuid root?
/usr/sbin/useradd needs write access to
/etc/passwd, and this means root privileges in unix. You want to check the return value of
system().
Since this code needs root privileges, you have to make sure your code is safe. You will want to run this under
taint mode. (check
perlsec for info, taint mode will be turned on for setuid or setgid scripts.) You want to make sure that any user input is safe to pass on to
system().
debian's adduser program is written in perl, maybe you could check it for some ideas.
One last thing: are you aware that exec never returns? You probably want a call to system (since it does a fork and waits for the external command to finish) when working with /usr/bin/passwd.
just my 2 cents,