What’s Vulnerable › Vulnerabilities

CVE-2006-1587

• Severity: low (CVSS 2.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2006-04-03 · updated 2026-06-16

Description

NetBSD 1.6 up to 3.0, when a user has "set record" in .mailrc with the default umask set, creates the record file with 0644 permissions, which allows local users to read the record file.

Affected products

• Netbsd: 1.6, 1.6-beta, 1.6.1, 1.6.2, 2.0, 2.0.1 (+4)

References

• http://secunia.com/advisories/19465
• http://securitytracker.com/id?1015847
• http://www.osvdb.org/24258
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25581
• http://secunia.com/advisories/19465
• http://securitytracker.com/id?1015847
• http://www.osvdb.org/24258
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25581

Get alerted when CVE-2006-1587 or the next vulnerability affects your stack