Unscored severity · published May 28, 2006
CVE-2006-1174
useradd in shadow-utils before 4.0.3, and possibly other versions before 4.0.8, does not provide a required argument to the open function when creating a new user mailbox, which…
–
CVSS
0.4%
EPSS
No
On KEV
Description
useradd in shadow-utils before 4.0.3, and possibly other versions before 4.0.8, does not provide a required argument to the open function when creating a new user mailbox, which causes the mailbox to be created with unpredictable permissions and possibly allows attackers to read or modify the mailbox.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 38% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SH
Shadow · Debian
through 4.0.7; 4.0.0; 4.0.1; 4.0.2; 4.0.4; 4.0.4.1; +2 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-1174
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-1174
cvs.pld.org.pl
http://cvs.pld.org.pl/shadow/NEWS?rev=1.109
lists.grok.org.uk
http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html
Patch
http://secunia.com/advisories/20370
Vendor Advisory
http://secunia.com/advisories/20506
Vendor Advisory
http://secunia.com/advisories/25098
More from Shadow
7.8
CVE-2017-20002
The Debian shadow package before 1:4.5-1 for Shadow incorrectly lists pts/0 and pts/1 as physical terminals in /etc/securetty
7.8
CVE-2005-4890
There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program"
4.7
CVE-2013-4235
shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees
–
CVE-2011-0721
Multiple CRLF injection vulnerabilities in (1) chfn and (2) chsh in shadow 1:4.1.4 allow local users to add new users or groups to /etc/passwd via the GECOS field
–
CVE-2008-5394
/bin/login in shadow 4.0.18.1 in Debian GNU/Linux, and probably other Linux distributions, allows local users in the utmp group to overwrite arbitrary files via a symlink attack…