Published: 13/03/2006 Updated: 03/10/2018

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

VMScore: 725

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

The Ubuntu 5.10 installer does not properly clear passwords from the installer log file (questions.dat), and leaves the log file with world-readable permissions, which allows local users to gain privileges.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ubuntu ubuntu linux 5.10

#!/usr/bin/perl -w use warnings; use strict; ############################################################################## # Author: Kristian Hermansen # Date: 3/12/2006 # Overview: Ubuntu Breezy stores the installation password in plain text # Link: launchpadnet/distros/ubuntu/+source/shadow/+bug/34606 ################################# ...

NVD-CWE-Other https://launchpad.net/distros/ubuntu/+source/shadow/+bug/34606 http://www.securityfocus.com/bid/17086 http://securitytracker.com/id?1015761 http://www.osvdb.org/23868 http://secunia.com/advisories/19200 http://www.vupen.com/english/advisories/2006/0927 https://exchange.xforce.ibmcloud.com/vulnerabilities/25170 https://usn.ubuntu.com/262-1/https://nvd.nist.gov https://www.exploit-db.com/exploits/1579/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2006-1183

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect