CVEvulnerability
CVE-2006-1656
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-04-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
vserver in util-vserver 0.30.209 executes a command as root when the suexec userid parameter is invalid and non-numeric, which might cause local users to inadvertently execute dangerous commands as root.
Affected configurations
• vserver util-vserver (<= 0.30.210)
• vserver util-vserver 0.30.209
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=360438 Patch
- http://www.securityfocus.com/bid/17361 Patch
- https://savannah.nongnu.org/bugs/?func=detailitem&item_id=15996 savannah.nongnu.org
- https://savannah.nongnu.org/patch/?func=detailitem&item_id=4966 savannah.nongnu.org
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=360438 Patch
- http://www.securityfocus.com/bid/17361 Patch
- https://savannah.nongnu.org/bugs/?func=detailitem&item_id=15996 savannah.nongnu.org
- https://savannah.nongnu.org/patch/?func=detailitem&item_id=4966 savannah.nongnu.org