CVE-2006-1656

Published: Apr 6, 2006Modified: Apr 16, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

vserver in util-vserver 0.30.209 executes a command as root when the suexec userid parameter is invalid and non-numeric, which might cause local users to inadvertently execute dangerous commands as root.

Affected (2)

Products: Vserver: Util Vserver

Vserver

1 product

Util Vserver

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Vserver Util Vserver	Up to 0.30.210
Vserver Util Vserver	Version 0.30.209

References (8)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=360438

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/17361

Source: cve@mitre.org

Patch

https://savannah.nongnu.org/bugs/?func=detailitem&item_id=15996

Source: cve@mitre.org

https://savannah.nongnu.org/patch/?func=detailitem&item_id=4966

Source: cve@mitre.org

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=360438

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.securityfocus.com/bid/17361

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://savannah.nongnu.org/bugs/?func=detailitem&item_id=15996

Source: af854a3a-2127-422b-91ae-364da2661108

https://savannah.nongnu.org/patch/?func=detailitem&item_id=4966

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.