CVE-2006-7191
Untrusted search path vulnerability in lamdaemon.pl in LDAP Account Manager (LAM) before 1.0.0...
Untrusted search path vulnerability in lamdaemon.pl in LDAP Account Manager (LAM) before 1.0.0 allows local users to gain privileges via a modified PATH that points to a malicious rm program.
Exploit likelihood
What each source reports
NVD Score used
Untrusted search path vulnerability in lamdaemon.pl in LDAP Account Manager (LAM) before 1.0.0 allows local users to gain privileges via a modified PATH that points to a malicious rm program.
- Record
CVE-2006-7191- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Untrusted search path vulnerability in lamdaemon.pl in LDAP Account Manager (LAM) before 1.0.0 allows local users to gain privileges via a modified PATH that points to a malicious rm program.
- Record
CVE-2006-7191- Updated
- 2026-11-02
EUVDEUVD-2006-7173 No score
Untrusted search path vulnerability in lamdaemon.pl in LDAP Account Manager (LAM) before 1.0.0 allows local users to gain privileges via a modified PATH that points to a malicious rm program.
- Record
EUVD-2006-7173- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-956h-rg8g-q33w No score
Untrusted search path vulnerability in lamdaemon.pl in LDAP Account Manager (LAM) before 1.0.0...
Untrusted search path vulnerability in lamdaemon.pl in LDAP Account Manager (LAM) before 1.0.0 allows local users to gain privileges via a modified PATH that points to a malicious rm program.
- Record
GHSA-956h-rg8g-q33w- Updated
- 2026-11-02
OSV No score
Untrusted search path vulnerability in lamdaemon.pl in LDAP Account Manager (LAM) before 1.0.0 allows local users to gain privileges via a modified PATH that points to a malicious rm program.
- Record
CVE-2006-7191- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-7191 No score
Untrusted search path vulnerability in lamdaemon.pl in LDAP Account Manager (LAM) before 1.0.0 allows local users to gain privileges via a modified PATH that points to a malicious rm program.
- Record
DEBIAN-CVE-2006-7191- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ldap-account-managerDebian:12 |
before 1.0.0-1 | 1.0.0-1 |
ldap-account-managerDebian:13 |
before 1.0.0-1 | 1.0.0-1 |
ldap-account-managerDebian:14 |
before 1.0.0-1 | 1.0.0-1 |
ldap-account-managerDebian:3.1 From an advisory covering 2 CVEs |
before 0.4.9-2sarge1, plus listed versions 0.4.9-2 |
0.4.9-2sarge1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| aliases | ||
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-7191 is a high vulnerability (CVSS 7.2) in Ldap Account Manager Account Manager, published April 3, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 28th percentile. Fixed in ldap-account-manager 1.0.0-1.
References
lam.cvs.sourceforge.net/lam/lam/lib/lamdaemon.pl?r1=1.32&r2=1.33
us.debian.org/security/2007/dsa-1287
securityfocus.com/bid/23857
secunia.com/advisories/25157
lam.sourceforge.net/changelog/index.htm
nvd.nist.gov/vuln/detail/CVE-2006-7191
github.com/advisories/GHSA-956h-rg8g-q33w
security-tracker.debian.org/tracker/CVE-2006-7191