CVE-2006-1174

CVE-2006-1174 describes a vulnerability in the useradd utility within shadow-utils versions prior to 4.0.3 (and possibly before 4.0.8) on Debian systems. This flaw stems from useradd failing to provide a necessary argument to the open function when creating new user mailboxes, leading to unpredictable mailbox permissions. The vulnerability has a CVSS score of 3.7, indicating a low severity, with an attack vector requiring local access and high attack complexity, potentially allowing attackers to read or modify mailboxes. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.