CVE-2006-1656
EPSS 0.05%
Description
vserver in util-vserver 0.30.209 executes a command as root when the suexec userid parameter is invalid and non-numeric, which might cause local users to inadvertently execute dangerous commands as root.
How to fix CVE-2006-1656
To remediate CVE-2006-1656, upgrade the affected package to a fixed version below.
- Debian/util-vserver—upgrade to 0.30.210-1 or later
Is CVE-2006-1656 being exploited?
Low — EPSS is 0.0%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0, < 0.30.210-1