Lucene search
Ubuntu.comUB:CVE-2006-1174HistoryMay 28, 2006 - 12:00 a.m.
CVE-2006-1174
2006-05-2800:00:00
ubuntu.com
ubuntu.com
7
3.7 Low
CVSS2
Access Vector
LOCAL
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:H/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
50.7%
useradd in shadow-utils before 4.0.3, and possibly other versions before
4.0.8, does not provide a required argument to the open function when
creating a new user mailbox, which causes the mailbox to be created with
unpredictable permissions and possibly allows attackers to read or modify
the mailbox.
Related
nessus
nessus
RHEL 4 : shadow-utils (RHSA-2007:0276)
2007-05-02 00:00:00
Scientific Linux Security Update : shadow-utils on SL4.x i386/x86_64
2012-08-01 00:00:00
CentOS 3 : shadow-utils (CESA-2007:0431)
2007-06-14 00:00:00
oraclelinux
oraclelinux
Low: shadow-utils security and bug fix update
2007-05-17 00:00:00
debiancve
debiancve
CVE-2006-1174
2006-05-28 23:02:00
cert
cert
Shadow Utils useradd utility sets incorrect file permissions
2007-12-14 00:00:00
centos
centos
shadow security update
2007-05-02 08:58:02
shadow security update
2007-06-11 21:08:22
openvas
openvas
Gentoo Security Advisory GLSA 200606-02 (shadow)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200606-02 (shadow)
2008-09-24 00:00:00
prion
prion
Open redirect
2006-05-28 23:02:00
cve
cve
CVE-2006-1174
2006-05-28 23:02:00
redhat
redhat
(RHSA-2007:0276) Low: shadow-utils security and bug fix update
2007-05-01 00:00:00
(RHSA-2007:0431) Low: shadow-utils security and bug fix update
2007-06-11 13:45:45
gentoo
gentoo
shadow: Privilege escalation
2006-06-07 00:00:00
securityvulns
securityvulns
3.7 Low
CVSS2
Access Vector
LOCAL
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:H/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
50.7%
Related for UB:CVE-2006-1174