Mail Box Permissions Issue in Shadow-utils by Affects Shadow

CVE-2006-1174

Summary

The vulnerability in Shadow-utils allows the 'useradd' command to create user mailboxes without the necessary parameters set on the open function, resulting in unpredictable permissions. This negligence can lead to potential unauthorized access, enabling attackers to read or modify the created mailboxes, posing a significant risk to user data integrity and privacy. It is crucial for users of affected versions to upgrade to the latest to mitigate this risk.

References