CVE-2006-1772

EPSS 0.38%
Veröffentlicht 13.04.2006 10:02:00
Zuletzt bearbeitet 16.06.2026 22:23:39
Erkennungen
Login

debconf in Debian GNU/Linux, when configuring mnogosearch in the mnogosearch-common 3.2.31-1 package, uses the world-readable config.dat file instead of the restricted passwords.dat for storing the cleartext database administrator password in the mnogosearch-common/database_admin_pass record, which allows local users to view the password.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 6

NVD 13 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Debian ≫ Debian Linux Version 3.1

Debian ≫ Debian Linux Version 3.1 Edition alpha

Debian ≫ Debian Linux Version 3.1 Edition amd64

Debian ≫ Debian Linux Version 3.1 Edition arm

Debian ≫ Debian Linux Version 3.1 Edition hppa

Debian ≫ Debian Linux Version 3.1 Edition ia-32

Debian ≫ Debian Linux Version 3.1 Edition ia-64

Debian ≫ Debian Linux Version 3.1 Edition m68k

Debian ≫ Debian Linux Version 3.1 Edition mips

Debian ≫ Debian Linux Version 3.1 Edition mipsel

Debian ≫ Debian Linux Version 3.1 Edition ppc

Debian ≫ Debian Linux Version 3.1 Edition s-390

Debian ≫ Debian Linux Version 3.1 Edition sparc

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.38%	0.295

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=361775

http://secunia.com/advisories/19589

http://www.securityfocus.com/bid/17477

https://nvd.nist.gov/vuln/detail/CVE-2006-1772

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-1772

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-1772

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2006-1772