CVE-2006-1079

CVE-2006-1079 describes a potential privilege escalation vulnerability in htpasswd, as used in Acme thttpd 2.25b and possibly other products like Apache. Local users could exploit this by injecting shell metacharacters into command-line arguments, which are then processed by a system function. This vulnerability has a CVSS score of 7.2, indicating high severity with local access, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While typically a non-setuid program, the risk increases if htpasswd is configured with sudo privileges or accessed remotely; however, there is no evidence of active exploitation, public exploit code, or significant community discussion.