CVE-2006-1844

LOW 2.1CVE-2006-1844 · Published 19/04/2006 · updated 16/06/2026

In short

CVE-2006-1844 is a LOW (CVSS 2.1) vulnerability affecting base-config (debian), shadow (debian).
Chance of exploitation in the next 30 days (EPSS): 0.34%, higher than 27.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
base-config debian	`= 2.53.10`	No fix yet
shadow debian	`= 4.0.14`	No fix yet

Description

The Debian installer for the (1) shadow 4.0.14 and (2) base-config 2.53.10 packages includes sensitive information in world-readable log files, including preseeded passwords and pppoeconf passwords, which might allow local users to gain privileges.

References

bugs.debian.org/cgi-bin/bugreport.cgi · Patch
secunia.com/advisories/19170 · Vendor Advisory
osvdb.org/23922 · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free