CVE-2006-1772
Published Apr 13, 2006
Last updated 16 years ago
Overview
- Description
- debconf in Debian GNU/Linux, when configuring mnogosearch in the mnogosearch-common 3.2.31-1 package, uses the world-readable config.dat file instead of the restricted passwords.dat for storing the cleartext database administrator password in the mnogosearch-common/database_admin_pass record, which allows local users to view the password.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.2
- Impact score
- 10
- Exploitability score
- 3.9
- Vector string
- AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
},
{
"criteria": "cpe:2.3:o:debian:debian_linux:3.1:*:alpha:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5BF84240-1881-4EFB-BB2F-F9CE8AD09C7B"
},
{
"criteria": "cpe:2.3:o:debian:debian_linux:3.1:*:amd64:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF8AE8C4-810F-41AB-A251-5A2D4DD6884D"
},
{
"criteria": "cpe:2.3:o:debian:debian_linux:3.1:*:arm:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5EACF214-FA27-44FF-A431-927AB79377A1"
},
{
"criteria": "cpe:2.3:o:debian:debian_linux:3.1:*:hppa:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E2B58895-0E2A-4466-9CB2-0083349A83B2"
},
{
"criteria": "cpe:2.3:o:debian:debian_linux:3.1:*:ia-32:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "03F8220A-9B1C-40AA-AEAB-F9A93225FBD5"
},
{
"criteria": "cpe:2.3:o:debian:debian_linux:3.1:*:ia-64:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2311919C-7864-469D-B0F6-9B11D8D0A1C3"
},
{
"criteria": "cpe:2.3:o:debian:debian_linux:3.1:*:m68k:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "19876495-4C1A-487C-955A-C5AA46362A1F"
},
{
"criteria": "cpe:2.3:o:debian:debian_linux:3.1:*:mips:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D75286DD-50BC-4B72-8AC8-E20730124DC2"
},
{
"criteria": "cpe:2.3:o:debian:debian_linux:3.1:*:mipsel:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1998C972-497E-4916-B50E-FB32303EEA8E"
},
{
"criteria": "cpe:2.3:o:debian:debian_linux:3.1:*:ppc:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A6CD3DD9-3A8A-4716-A2D1-136A790AFF94"
},
{
"criteria": "cpe:2.3:o:debian:debian_linux:3.1:*:s-390:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6CE2020A-4FB2-4FCD-8561-7BD147CD95EB"
},
{
"criteria": "cpe:2.3:o:debian:debian_linux:3.1:*:sparc:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "08E90AFA-C262-46D0-B60E-26B67C9602D5"
}
],
"operator": "OR"
}
]
}
]