CVE-2006-6614

published 2006-12-18

CVE-2006-6614: The save_log_local function in Fully Automatic Installation (FAI) 2.10.1, and possibly 3.1.2, when verbose mode is enabled, stores the root password hash in…

Priority P4 7 low 1.9 CVSS 2.0

AV L AC M Au N C P I N A N

The save_log_local function in Fully Automatic Installation (FAI) 2.10.1, and possibly 3.1.2, when verbose mode is enabled, stores the root password hash in /var/log/fai/current/fai.log, whose file permissions allow it to be copied to other hosts when fai-savelog is called and allows attackers to obtain the hash.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
debian	debian_linux	—	—
debian	fai	< fai 3.1.3 (bookworm)	fai 3.1.3 (bookworm)
thomas_lange	fully_automated_installation	—	—
thomas_lange	fully_automated_installation	—	—

CVSS provenance

nvd v2.0 1.9 LOW AV:L/AC:M/Au:N/C:P/I:N/A:N

osv 1.9 LOW

vendor_debian 1.9 LOW

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.