What’s Vulnerable › Vulnerabilities

CVE-2006-1656

• Severity: high (CVSS 7.2 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2006-04-06 · updated 2026-06-16

Description

vserver in util-vserver 0.30.209 executes a command as root when the suexec userid parameter is invalid and non-numeric, which might cause local users to inadvertently execute dangerous commands as root.

Affected products

• Vserver Util-Vserver: through 0.30.210; 0.30.209

References

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=360438
• http://www.securityfocus.com/bid/17361
• https://savannah.nongnu.org/bugs/?func=detailitem&item_id=15996
• https://savannah.nongnu.org/patch/?func=detailitem&item_id=4966
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=360438
• http://www.securityfocus.com/bid/17361
• https://savannah.nongnu.org/bugs/?func=detailitem&item_id=15996
• https://savannah.nongnu.org/patch/?func=detailitem&item_id=4966

Get alerted when CVE-2006-1656 or the next vulnerability affects your stack