cbcvebase.
CVE-2006-1772
published 2006-04-13

CVE-2006-1772: debconf in Debian GNU/Linux, when configuring mnogosearch in the mnogosearch-common 3.2.31-1 package, uses the world-readable config.dat file instead of the…

PriorityP420high7.2CVSS 2.0
AVLACLAuNCCICAC
EPSS
0.38%
30.6th percentile
debconf in Debian GNU/Linux, when configuring mnogosearch in the mnogosearch-common 3.2.31-1 package, uses the world-readable config.dat file instead of the restricted passwords.dat for storing the cleartext database administrator password in the mnogosearch-common/database_admin_pass record, which allows local users to view the password.

Affected

1 ranges
VendorProductVersion rangeFixed in
debiandebian_linux——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.