PT-2006-2200 · Canonical · Ubuntu

Karl Øie + 1 · Publicado 2006-03-13 · Atualizado 2018-10-03 · CVE-2006-1183

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Ubuntu version 5.10

Description The issue concerns the Ubuntu 5.10 installer, which fails to properly clear passwords from the installer log file, specifically questions.dat. This file is left with world-readable permissions, allowing local users to potentially gain privileges.

Recommendations For Ubuntu version 5.10, consider restricting access to the questions.dat log file to prevent unauthorized users from reading its contents. As a temporary workaround, manually remove or secure the questions.dat file after installation to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2006-1183

Produtos afetados

Ubuntu

Referências · 10

• 🔥 https://launchpad.net/distros/ubuntu/+source/shadow/+bug/34606 · Exploit
• 🔥 https://exploit-db.com/exploits/1579 · Exploit
• http://osvdb.org/23868 · Nota
• http://vupen.com/english/advisories/2006/0927 · Nota
• http://securityfocus.com/bid/17086 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25170 · Nota
• http://secunia.com/advisories/19200 · Nota
• http://securitytracker.com/id?1015761 · Nota
• https://usn.ubuntu.com/262-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-1183 · Nota de Segurança