CVE-2006-1174
- State
- Published
- Severity
- Not scored
- Published
- May 28, 2006
- Updated
- Aug 7, 2024
- Reserved
- Mar 12, 2006
Description
useradd in shadow-utils before 4.0.3, and possibly other versions before 4.0.8, does not provide a required argument to the open function when creating a new user mailbox, which causes the mailbox to be created with unpredictable permissions and possibly allows attackers to read or modify the mailbox.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 20070920 VMSA-2007-0006 Critical security updates for all supported versions of VMware ESX Server, VMware Server, VMware Workstation, VMware ACE, and VMware Playermailing-list
- 25098third-party-advisory
- 25894third-party-advisory
- RHSA-2007:0431vendor-advisory
- ADV-2007-3229vdb-entry
- 25267third-party-advisory
- RHSA-2007:0276vendor-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2007-249.htm
- 18111vdb-entry
- 1018221vdb-entry
- 25629third-party-advisory
- http://cvs.pld.org.pl/shadow/NEWS?rev=1.109
- shadow-utils-useradd-file-permission(26958)vdb-entry
- VU#312692third-party-advisory
- GLSA-200606-02vendor-advisory
- 25896third-party-advisory
- 20070511 rPSA-2007-0096-1 shadowmailing-list
- MDKSA-2006:090vendor-advisory
- oval:org.mitre.oval:def:10807vdb-entrysignature
- 26909third-party-advisory
- 27706third-party-advisory
- ADV-2006-2006vdb-entry
- https://issues.rpath.com/browse/RPL-1357
- 20506third-party-advisory
- 20370third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.