NetSight
low2.1

CVE-2006-1844

The Debian installer for the (1) shadow 4.0.14 and (2) base-config 2.53.10 packages includes sensitive information in world-readable log files, including prese…

Impact

The Debian installer for the (1) shadow 4.0.14 and (2) base-config 2.53.10 packages includes sensitive information in world-readable log files, including preseeded passwords and pppoeconf passwords, which might allow local users to gain privileges.

Affected products

VendorProductAffected versions
DebianBase-Config
Version 2.53.10
DebianShadow
Version 4.0.14

References