CVE-2006-1772

Publication date 13 April 2006

Last updated 17 July 2025

Ubuntu priority

Medium

Why this priority?

Description

debconf in Debian GNU/Linux, when configuring mnogosearch in the mnogosearch-common 3.2.31-1 package, uses the world-readable config.dat file instead of the restricted passwords.dat for storing the cleartext database administrator password in the mnogosearch-common/database_admin_pass record, which allows local users to view the password.

Status

Package Ubuntu Release Status
mnogosearch 9.10 karmic
Fixed 3.2.37-3.1
9.04 jaunty
Fixed 3.2.37-3.1
8.10 intrepid
Fixed 3.2.37-3.1
8.04 LTS hardy
Fixed 3.2.37-3.1
7.10 gutsy
Fixed 3.2.37-3.1
7.04 feisty
Fixed 3.2.37-3.1
6.10 edgy
Fixed 3.2.37-3.1
6.06 LTS dapper Ignored end of life

References

Other references

Access our resources on patching vulnerabilities