CVE-2006-1844
The Debian installer for the (1) shadow 4.0.14 and (2) base-config 2.53.10 packages includes sensitive information in world-readable log files, including preseeded passwords and pppoeconf passwords, which might allow local users to gain privileges.
- Score
- CVSS 2.0 2.1 Low
- Status
- Modified - cve@mitre.org
- Published
- 2006-04-19
- Last modified
- 2024-09-16
Affected products
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=356939
- http://secunia.com/advisories/19170
- http://www.osvdb.org/23922
