CVE-2006-0582 json
Unspecified vulnerability in rshd in Heimdal 0.6.x before 0.6.6 and 0.7.x before 0.7.2, when storing forwarded credentials, allows attacker…
published 2006-02-08 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-0589
- cvss
- 2.1
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.5%
- EPSS 0.5% chance of exploitation in 30 days, percentile 39%
- public exploits
- 0
- none known
Summary
Unspecified vulnerability in rshd in Heimdal 0.6.x before 0.6.6 and 0.7.x before 0.7.2, when storing forwarded credentials, allows attackers to overwrite arbitrary files and change file ownership via unknown vectors.
Patch / fix
- heimdal Debian 14, Debian 13, Debian 12 0.7.2-1
debian advisories DEBIAN-CVE-2006-0582
- securityfocus.com/bid/16524 patch
- pdc.kth.se/heimdal/advisory/2006-02-06/ patch
- gentoo.org/security/en/glsa/glsa-200603-14.xml advisory
- debian.org/security/2006/dsa-977 advisory
- secunia.com/advisories/18894 advisory
- secunia.com/advisories/19005 advisory
- secunia.com/advisories/18806 advisory
- secunia.com/advisories/18733 advisory
- secunia.com/advisories/19302 advisory
Exploit prediction
0.45% chance of exploitation in the next 30 days, higher than 39% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 2.1 | AV:L/AC:L/Au:N/C:N/I:P/A:N |
References
-
gentoo.org
/security/en/glsa/glsa-200603-14.xml
vendor-advisory, patch
-
debian.org
/security/2006/dsa-977
vendor-advisory, patch
-
securityfocus.com
/bid/16524
vdb-entry, patch
-
secunia.com
/advisories/18894
third-party-advisory, patch, vendor-advisory
-
secunia.com
/advisories/19005
third-party-advisory, patch, vendor-advisory
-
pdc.kth.se
/heimdal/advisory/2006-02-06/
patch
-
secunia.com
/advisories/18806
third-party-advisory, patch, vendor-advisory
-
secunia.com
/advisories/18733
third-party-advisory, patch, vendor-advisory
-
secunia.com
/advisories/19302
third-party-advisory, patch, vendor-advisory
-
ubuntu.com
/usn/usn-253-1
vendor-advisory
-
usn.ubuntu.com
/247-1/
vendor-advisory
-
securityfocus.com
/archive/1/426043/100/0/threaded
vendor-advisory
-
vupen.com
/english/advisories/2006/0456
vdb-entry, vendor-advisory
-
vupen.com
/english/advisories/2006/0628
vdb-entry, vendor-advisory
-
osvdb.org
/22986
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/24532
vdb-entry
-
securitytracker.com
/id?1015591
vdb-entry
-
stacken.kth.se
/lists/heimdal-discuss/2006-02/msg00028.html
mailing-list
Sources
- CVE List CVE-2006-0582
- NVD CVE-2006-0582
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.