Public exploit available

Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2006-1183 — Linux vulnerability

5 documents5 sources

Severity

7.2HIGHNVD

EPSS

0.1%

top 73.22%

CISA KEV

Not in KEV

Exploit

PoC available

Public exploit / PoC exists

Affected products

Ubuntu Linux

Timeline

PublishedMar 13

Latest updateMay 1

Description

The Ubuntu 5.10 installer does not properly clear passwords from the installer log file (questions.dat), and leaves the log file with world-readable permissions, which allows local users to gain privileges.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages0 packages

Also affects: Ubuntu Linux 5.10

🔴Vulnerability Details

GHSA

GHSA-crpp-368c-254j: The Ubuntu 5↗2022-05-01

▶

CVEList

CVE-2006-1183: The Ubuntu 5↗2006-03-13

▶

💥Exploits & PoCs

Exploit-DB

Ubuntu 5.10 Installer - Password Disclosure↗2006-03-12

▶

📋Vendor Advisories

Debian

CVE-2006-1183: shadow - The Ubuntu 5.10 installer does not properly clear passwords from the installer l...↗2006

▶