Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2006-3597 | First vendor Publication | 2006-07-18 |
| Vendor | Cve | Last vendor Modification | 2008-09-05 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:L/AC:L/Au:N/C:C/I:C/A:C) | |||
|---|---|---|---|
| Cvss Base Score | 7.2 | Attack Range | Local |
| Cvss Impact Score | 10 | Attack Complexity | Low |
| Cvss Expoit Score | 3.9 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| passwd before 1:4.0.13 on Ubuntu 6.06 LTS leaves the root password blank instead of locking it when the administrator selects the "Go Back" option after the final "Installation complete" message and uses the main menu, which causes the password to be zeroed out in the installer's memory. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3597 |
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Os | 1 |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 27091 | Ubuntu Linux Alternate/Server CD Installer Empty root Password Canonical Ltd. Ubuntu contains a flaw that may allow a malicious user to gain access to unauthorized privileges. The issue is triggered when the "Go Back" option is selected after "Installation Complete" message during the installation. This sets the root password to a null string which can be exploited by an attacker to gain unauthorized access to the system. |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2007-11-10 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-316-1.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
| Source | Url |
|---|---|
| OSVDB | http://www.osvdb.org/27091 |
| SECUNIA | http://secunia.com/advisories/21022 |
| UBUNTU | http://www.ubuntu.com/usn/usn-316-1 |
Alert History
| Date | Informations |
|---|---|
| 2021-05-04 12:04:18 |
|
| 2021-04-22 01:04:56 |
|
| 2020-05-23 00:18:05 |
|
| 2016-06-28 15:52:39 |
|
| 2016-04-26 14:51:33 |
|
| 2014-02-17 10:36:28 |
|
| 2013-05-11 11:03:20 |
|
