CVE-2006-1772

UNKNOWN

debconf in Debian GNU/Linux, when configuring mnogosearch in the mnogosearch-common 3.2.31-1 package, uses the world-readable config.dat file instead of the restricted passwords.dat for storing the cleartext database administrator password in the mnogosearch-common/database_admin_pass record, which allows local users to view the password

Published Apr 13, 2006

Modified 2 years ago

Details

debconf in Debian GNU/Linux, when configuring mnogosearch in the mnogosearch-common 3.2.31-1 package, uses the world-readable config.dat file instead of the restricted passwords.dat for storing the cleartext database administrator password in the mnogosearch-common/database_admin_pass record, which allows local users to view the password.

References

WEB

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=361775

ADVISORY

http://secunia.com/advisories/19589

WEB

http://www.securityfocus.com/bid/17477

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2006-1772

CVSS Analysis

CVSS v2.0

7.2