CVE-2006-1844

The Debian installer for the (1) shadow 4.0.14 and (2) base-config 2.53.10 packages includes sensitive information in world-readable log files, including preseeded passwords and pppoeconf passwords, which might allow local users to gain privileges.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:debian:base-config:2.53.10:*:*:*:*:*:*:*
cpe:2.3:a:debian:shadow:4.0.14:*:*:*:*:*:*:*

History

21 Nov 2024, 00:09

Type Values Removed Values Added
References () http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=356939 - Patch () http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=356939 - Patch
References () http://secunia.com/advisories/19170 - Vendor Advisory () http://secunia.com/advisories/19170 - Vendor Advisory
References () http://www.osvdb.org/23922 - Patch () http://www.osvdb.org/23922 - Patch

Information

Published : 2006-04-19 16:06

Updated : 2024-11-21 00:09


NVD link : CVE-2006-1844

Mitre link : CVE-2006-1844

CVE.ORG link : CVE-2006-1844


JSON object : View

Products Affected

debian

  • shadow
  • base-config