Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2006-1174HistoryMay 28, 2006 - 11:02 p.m.
CVE-2006-1174
2006-05-2823:02:00
Debian Security Bug Tracker
security-tracker.debian.org
7
3.7 Low
CVSS2
Access Vector
LOCAL
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:H/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
50.7%
useradd in shadow-utils before 4.0.3, and possibly other versions before 4.0.8, does not provide a required argument to the open function when creating a new user mailbox, which causes the mailbox to be created with unpredictable permissions and possibly allows attackers to read or modify the mailbox.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | shadow | < 1:4.0.15-10 | shadow_1:4.0.15-10_all.deb |
| Debian | 11 | all | shadow | < 1:4.0.15-10 | shadow_1:4.0.15-10_all.deb |
| Debian | 10 | all | shadow | < 1:4.0.15-10 | shadow_1:4.0.15-10_all.deb |
| Debian | 999 | all | shadow | < 1:4.0.15-10 | shadow_1:4.0.15-10_all.deb |
| Debian | 13 | all | shadow | < 1:4.0.15-10 | shadow_1:4.0.15-10_all.deb |
Related
oraclelinux
oraclelinux
Low: shadow-utils security and bug fix update
2007-05-17 00:00:00
nessus
nessus
CentOS 3 : shadow-utils (CESA-2007:0431)
2007-06-14 00:00:00
GLSA-200606-02 : shadow: Privilege escalation
2006-06-08 00:00:00
RHEL 3 : shadow-utils (RHSA-2007:0431)
2007-06-12 00:00:00
centos
centos
shadow security update
2007-05-02 08:58:02
shadow security update
2007-06-11 21:08:22
cert
cert
Shadow Utils useradd utility sets incorrect file permissions
2007-12-14 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200606-02 (shadow)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200606-02 (shadow)
2008-09-24 00:00:00
ubuntucve
ubuntucve
CVE-2006-1174
2006-05-28 00:00:00
prion
prion
Open redirect
2006-05-28 23:02:00
cve
cve
CVE-2006-1174
2006-05-28 23:02:00
redhat
redhat
(RHSA-2007:0276) Low: shadow-utils security and bug fix update
2007-05-01 00:00:00
(RHSA-2007:0431) Low: shadow-utils security and bug fix update
2007-06-11 13:45:45
gentoo
gentoo
shadow: Privilege escalation
2006-06-07 00:00:00
securityvulns
securityvulns
3.7 Low
CVSS2
Access Vector
LOCAL
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:H/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
50.7%
Related for DEBIANCVE:CVE-2006-1174