CVE-2006-1183

published 2006-03-13

CVE-2006-1183: The Ubuntu 5.10 installer does not properly clear passwords from the installer log file (questions.dat), and leaves the log file with world-readable…

high 7.2 CVSS 3.1

AV L AC L Au N C C I C A C

EXPLOIT

The Ubuntu 5.10 installer does not properly clear passwords from the installer log file (questions.dat), and leaves the log file with world-readable permissions, which allows local users to gain privileges.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
debian	shadow	—	—
ubuntu	ubuntu_linux	—	—