ByteOS Network

CVE Vulnerability Details :

CVE-2006-1174

PUBLISHED

More Info Official Page

Assigner-certcc

Assigner Org ID-37e5125f-f79b-445b-8fad-9564f167944b

Published At-28 May, 2006 | 23:00

Updated At-07 Aug, 2024 | 17:03

▼CVE Numbering Authority (CNA)

useradd in shadow-utils before 4.0.3, and possibly other versions before 4.0.8, does not provide a required argument to the open function when creating a new user mailbox, which causes the mailbox to be created with unpredictable permissions and possibly allows attackers to read or modify the mailbox.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html	mailing-list x_refsource_FULLDISC
http://secunia.com/advisories/25098	third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/25894	third-party-advisory x_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2007-0431.html	vendor-advisory x_refsource_REDHAT
http://www.vupen.com/english/advisories/2007/3229	vdb-entry x_refsource_VUPEN
http://secunia.com/advisories/25267	third-party-advisory x_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2007-0276.html	vendor-advisory x_refsource_REDHAT
http://support.avaya.com/elmodocs2/security/ASA-2007-249.htm	x_refsource_CONFIRM
http://www.securityfocus.com/bid/18111	vdb-entry x_refsource_BID
http://www.securitytracker.com/id?1018221	vdb-entry x_refsource_SECTRACK
http://secunia.com/advisories/25629	third-party-advisory x_refsource_SECUNIA
http://cvs.pld.org.pl/shadow/NEWS?rev=1.109	x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/26958	vdb-entry x_refsource_XF
http://www.kb.cert.org/vuls/id/312692	third-party-advisory x_refsource_CERT-VN
http://www.gentoo.org/security/en/glsa/glsa-200606-02.xml	vendor-advisory x_refsource_GENTOO
http://secunia.com/advisories/25896	third-party-advisory x_refsource_SECUNIA
http://www.securityfocus.com/archive/1/468336/100/0/threaded	mailing-list x_refsource_BUGTRAQ
http://www.mandriva.com/security/advisories?name=MDKSA-2006:090	vendor-advisory x_refsource_MANDRIVA
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10807	vdb-entry signature x_refsource_OVAL
http://secunia.com/advisories/26909	third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/27706	third-party-advisory x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2006/2006	vdb-entry x_refsource_VUPEN
https://issues.rpath.com/browse/RPL-1357	x_refsource_CONFIRM
http://secunia.com/advisories/20506	third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/20370	third-party-advisory x_refsource_SECUNIA
ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc	vendor-advisory x_refsource_SGI

Hyperlink: http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html

Resource:

mailing-list

x_refsource_FULLDISC

Hyperlink: http://secunia.com/advisories/25098

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://secunia.com/advisories/25894

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.redhat.com/support/errata/RHSA-2007-0431.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.vupen.com/english/advisories/2007/3229

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://secunia.com/advisories/25267

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.redhat.com/support/errata/RHSA-2007-0276.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://support.avaya.com/elmodocs2/security/ASA-2007-249.htm

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securityfocus.com/bid/18111

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://www.securitytracker.com/id?1018221

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://secunia.com/advisories/25629

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://cvs.pld.org.pl/shadow/NEWS?rev=1.109

Resource:

x_refsource_CONFIRM

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/26958

Resource:

vdb-entry

x_refsource_XF

Hyperlink: http://www.kb.cert.org/vuls/id/312692

Resource:

third-party-advisory

x_refsource_CERT-VN

Hyperlink: http://www.gentoo.org/security/en/glsa/glsa-200606-02.xml

Resource:

vendor-advisory

x_refsource_GENTOO

Hyperlink: http://secunia.com/advisories/25896

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.securityfocus.com/archive/1/468336/100/0/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: http://www.mandriva.com/security/advisories?name=MDKSA-2006:090

Resource:

vendor-advisory

x_refsource_MANDRIVA

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10807

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: http://secunia.com/advisories/26909

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://secunia.com/advisories/27706

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.vupen.com/english/advisories/2006/2006

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: https://issues.rpath.com/browse/RPL-1357

Resource:

x_refsource_CONFIRM

Hyperlink: http://secunia.com/advisories/20506

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://secunia.com/advisories/20370

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc

Resource:

vendor-advisory

x_refsource_SGI

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html	mailing-list x_refsource_FULLDISC x_transferred
http://secunia.com/advisories/25098	third-party-advisory x_refsource_SECUNIA x_transferred
http://secunia.com/advisories/25894	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.redhat.com/support/errata/RHSA-2007-0431.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.vupen.com/english/advisories/2007/3229	vdb-entry x_refsource_VUPEN x_transferred
http://secunia.com/advisories/25267	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.redhat.com/support/errata/RHSA-2007-0276.html	vendor-advisory x_refsource_REDHAT x_transferred
http://support.avaya.com/elmodocs2/security/ASA-2007-249.htm	x_refsource_CONFIRM x_transferred
http://www.securityfocus.com/bid/18111	vdb-entry x_refsource_BID x_transferred
http://www.securitytracker.com/id?1018221	vdb-entry x_refsource_SECTRACK x_transferred
http://secunia.com/advisories/25629	third-party-advisory x_refsource_SECUNIA x_transferred
http://cvs.pld.org.pl/shadow/NEWS?rev=1.109	x_refsource_CONFIRM x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/26958	vdb-entry x_refsource_XF x_transferred
http://www.kb.cert.org/vuls/id/312692	third-party-advisory x_refsource_CERT-VN x_transferred
http://www.gentoo.org/security/en/glsa/glsa-200606-02.xml	vendor-advisory x_refsource_GENTOO x_transferred
http://secunia.com/advisories/25896	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.securityfocus.com/archive/1/468336/100/0/threaded	mailing-list x_refsource_BUGTRAQ x_transferred
http://www.mandriva.com/security/advisories?name=MDKSA-2006:090	vendor-advisory x_refsource_MANDRIVA x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10807	vdb-entry signature x_refsource_OVAL x_transferred
http://secunia.com/advisories/26909	third-party-advisory x_refsource_SECUNIA x_transferred
http://secunia.com/advisories/27706	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.vupen.com/english/advisories/2006/2006	vdb-entry x_refsource_VUPEN x_transferred
https://issues.rpath.com/browse/RPL-1357	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/20506	third-party-advisory x_refsource_SECUNIA x_transferred
http://secunia.com/advisories/20370	third-party-advisory x_refsource_SECUNIA x_transferred
ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc	vendor-advisory x_refsource_SGI x_transferred