CVE-2006-1248

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-03-17 · updated 2026-06-16

Description

Unspecified vulnerability in usermod in HP-UX B.11.00, B.11.11, and B.11.23, when run with certain options that involve a new home directory, might cause usermod to change the ownership of all directories and files under the new directory, which might result in less secure permissions than intended.

Affected products

Hewlett Packard Enterprise (HPE) HP-UX: 11.00, 11.11, 11.23

References

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00614838
http://secunia.com/advisories/19305
http://securitytracker.com/id?1015782
http://securitytracker.com/id?1015834
http://www.securityfocus.com/bid/17143
http://www.vupen.com/english/advisories/2006/0997
https://exchange.xforce.ibmcloud.com/vulnerabilities/25311
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1098
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A772
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A785
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00614838
http://secunia.com/advisories/19305

Get alerted when CVE-2006-1248 or the next vulnerability affects your stack