CVE-2006-5659

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-11-03 · updated 2026-06-16

Description

PAM_extern before 0.2 sends a password as a command line argument, which allows local users to obtain the password by listing the command line arguments, such as ps. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

Pam Extern: through 0.1

References

http://www.vupen.com/english/advisories/2006/4235
https://exchange.xforce.ibmcloud.com/vulnerabilities/29912
http://www.vupen.com/english/advisories/2006/4235
https://exchange.xforce.ibmcloud.com/vulnerabilities/29912

Get alerted when CVE-2006-5659 or the next vulnerability affects your stack