CVE-2006-1174: useradd in shadow-utils before 4.0.3, and possibly other versions before 4.0.8, does not provide a required...

Security readout for executives and security teams

This flaw is in shadow-utils useradd. When creating a new user's mailbox, it may create the file with unpredictable permissions, exposing mailbox contents to unauthorized reading or modification. Business impact is mostly confidentiality and integrity risk on systems where local accounts are created with the vulnerable tool. Exposure is most likely on Linux or appliance systems using affected shadow-utils versions where useradd creates local mailboxes. The bundle references several vendor advisories, but the supplied affected-product data is incomplete. Treat as a targeted hygiene issue, not an emergency from the supplied evidence. Prioritize systems with many local accounts, shared administration, or sensitive local mailboxes, and fold remediation into package update cycles. Mitigation focus: Apply relevant vendor security updates for shadow-utils or bundled platform packages.; Verify shadow-utils is at a vendor-fixed version, not merely above an upstream number.; Review and correct permissions on mailboxes created while vulnerable..

Prepared

Jun 29, 2026, 12:30 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.