CVE-2006-3597 | BDVDB-2026-18111 Detail

Description#

passwd before 1:4.0.13 on Ubuntu 6.06 LTS leaves the root password blank instead of locking it when the administrator selects the "Go Back" option after the final "Installation complete" message and uses the main menu, which causes the password to be zeroed out in the installer's memory.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.ubuntu.com/usn/usn-316-1
http://www.osvdb.org/27091
http://secunia.com/advisories/21022

Exploit#

No public exploit known

History#

Version 12006-07-14Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.