EUVD-2008-5082

Malware in sbrugna...

CVE-2008-5104

Ubuntu 6.06 LTS, 7.10, 8.04 LTS, and 8.10, when installed as a virtual machine by 1 python-vm-builder or 2 ubuntu-vm-builder in VMBuilder 0.9 in Ubuntu 8.10, have ! exclamation point as the default root password, which allows attackers to bypass intended login restrictions...

CVE-2008-5103

The 1 python-vm-builder and 2 ubuntu-vm-builder implementations in VMBuilder 0.9 in Ubuntu 8.10 omit the -e option when invoking chpasswd with a root:! argument, which configures the root account with a cleartext password of ! exclamation point and allows attackers to bypass intended login...

Design/Logic Flaw

The 1 python-vm-builder and 2 ubuntu-vm-builder implementations in VMBuilder 0.9 in Ubuntu 8.10 omit the -e option when invoking chpasswd with a root:! argument, which configures the root account with a cleartext password of ! exclamation point and allows attackers to bypass intended login...

CVE-2008-5104

Ubuntu 6.06 LTS, 7.10, 8.04 LTS, and 8.10, when installed as a virtual machine by 1 python-vm-builder or 2 ubuntu-vm-builder in VMBuilder 0.9 in Ubuntu 8.10, have ! exclamation point as the default root password, which allows attackers to bypass intended login restrictions...

CVE-2008-5104

Ubuntu 6.06 LTS, 7.10, 8.04 LTS, and 8.10, when installed as a virtual machine by 1 python-vm-builder or 2 ubuntu-vm-builder in VMBuilder 0.9 in Ubuntu 8.10, have ! exclamation point as the default root password, which allows attackers to bypass intended login restrictions...

CVE-2008-5103

The 1 python-vm-builder and 2 ubuntu-vm-builder implementations in VMBuilder 0.9 in Ubuntu 8.10 omit the -e option when invoking chpasswd with a root:! argument, which configures the root account with a cleartext password of ! exclamation point and allows attackers to bypass intended login...

CVE-2008-5103

CVE-2008-5103 affects VMBuilder 0.9 in Ubuntu 8.10, where the python-vm-builder and ubuntu-vm-builder implementations omit the -e option when calling chpasswd with a root:! argument. This results in the root account being configured with a cleartext password of !, bypassing intended login restric...

[USN-670-1] VMBuilder vulnerability

=========================================================== Ubuntu Security Notice USN-670-1 November 13, 2008 vm-builder vulnerability https://bugs.launchpad.net/+bug/296841 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu...

USN-670-1: VMBuilder vulnerability

Mathias Gug discovered that vm-builder improperly set the root password when creating virtual machines. An attacker could exploit this to gain root privileges to the virtual machine by using a predictable password. This vulnerability only affects virtual machines created with vm-builder under...