CVE-2006-1844
The Debian installer for the (1) shadow 4.0.14 and (2) base-config 2.53.10 packages includes...
CVE-2006-1844 is a low vulnerability (CVSS 2.1) in Debian Base-config, published April 19, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 27th percentile. Fixed in shadow 1:4.0.14-9.
- Severity
- 2.1 LowCVSS 2.0, NVD
- Exploit chance
- 0.34%EPSS, 27th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1:4.0.14-9shadow +2 more
Description
The Debian installer for the (1) shadow 4.0.14 and (2) base-config 2.53.10 packages includes sensitive information in world-readable log files, including preseeded passwords and pppoeconf passwords, which might allow local users to gain privileges.
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
The Debian installer for the (1) shadow 4.0.14 and (2) base-config 2.53.10 packages includes sensitive information in world-readable log files, including preseeded passwords and pppoeconf passwords, which might allow local users to gain privileges.
- Record
CVE-2006-1844- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE ListNo score
The Debian installer for the (1) shadow 4.0.14 and (2) base-config 2.53.10 packages includes sensitive information in world-readable log files, including preseeded passwords and pppoeconf passwords, which might allow local users to gain privileges.
- Record
CVE-2006-1844- Updated
- 2026-11-02
EUVDEUVD-2006-1844No score
The Debian installer for the (1) shadow 4.0.14 and (2) base-config 2.53.10 packages includes sensitive information in world-readable log files, including preseeded passwords and pppoeconf passwords, which might allow local users to gain privileges.
- Record
EUVD-2006-1844- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f7w6-w5p4-76pjNo score
The Debian installer for the (1) shadow 4.0.14 and (2) base-config 2.53.10 packages includes...
The Debian installer for the (1) shadow 4.0.14 and (2) base-config 2.53.10 packages includes sensitive information in world-readable log files, including preseeded passwords and pppoeconf passwords, which might allow local users to gain privileges.
- Record
GHSA-f7w6-w5p4-76pj- Updated
- 2026-11-02
OSVNo score
The Debian installer for the (1) shadow 4.0.14 and (2) base-config 2.53.10 packages includes sensitive information in world-readable log files, including preseeded passwords and pppoeconf passwords, which might allow local users to gain privileges.
- Record
CVE-2006-1844- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-1844No score
The Debian installer for the (1) shadow 4.0.14 and (2) base-config 2.53.10 packages includes sensitive information in world-readable log files, including preseeded passwords and pppoeconf passwords, which might allow local users to gain privileges.
- Record
DEBIAN-CVE-2006-1844- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.