NVD

Id
59893  
Name
CVE-2006-1174  
Description
useradd in shadow-utils before 4.0.3, and possibly other versions before 4.0.8, does not provide a required argument to the open function when creating a new user mailbox, which causes the mailbox to be created with unpredictable permissions and possibly allows attackers to read or modify the mailbox.  
Reject
 
CVSS Version
2  
CVSS Score
3.7  
Severity
Low  
CVSS Base Score
3.7  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-05-28  
Modified Date
2011-03-10  
Seq
2006-1174  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
308135 59893 CVE-2006-1174 20070602-01-P  View
308136 59893 CVE-2006-1174 http://cvs.pld.org.pl/shadow/NEWS?rev=1.109  View
308137 59893 CVE-2006-1174 20070920 VMSA-2007-0006 Critical security updates for all supported versions of VMware ESX Server, VMware Server, VMware Workstation, VMware ACE, and VMware Player  View
308138 59893 CVE-2006-1174 oval:org.mitre.oval:def:10807  View
308139 59893 CVE-2006-1174 http://support.avaya.com/elmodocs2/security/ASA-2007-249.htm  View
308140 59893 CVE-2006-1174 GLSA-200606-02  View
308141 59893 CVE-2006-1174 VU#312692  View
308142 59893 CVE-2006-1174 MDKSA-2006:090  View
308143 59893 CVE-2006-1174 RHSA-2007:0276  View
308144 59893 CVE-2006-1174 RHSA-2007:0431  View
308145 59893 CVE-2006-1174 20070511 rPSA-2007-0096-1 shadow  View
308146 59893 CVE-2006-1174 18111  View
308147 59893 CVE-2006-1174 1018221  View
308148 59893 CVE-2006-1174 ADV-2006-2006  View
308149 59893 CVE-2006-1174 ADV-2007-3229  View
308150 59893 CVE-2006-1174 shadow-utils-useradd-file-permission(26958)  View
308151 59893 CVE-2006-1174 https://issues.rpath.com/browse/RPL-1357  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58688 JVNDB-2006-000953 Shadow-utils の useradd におけるメールボックスの作成時に適切なパーミッションが設定されない問題 shadow-utils に含まれている useradd には、新規ユーザのメールボックス作成時の open() 関数に関連する処理の不備により、ユーザのメールボックスに適切なパーミッションが設定されない問題があります。 CVE-2006-1174 17276 CVE-2006-1174 59893 3.7 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000953.html 2006-05-28 2007-06-22 View