Lucene search

Ubuntu.comUB:CVE-2008-5104

HistoryNov 17, 2008 - 12:00 a.m.

CVE-2008-5104

2008-11-1700:00:00

ubuntu.com

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

44.9%

JSON

Ubuntu 6.06 LTS, 7.10, 8.04 LTS, and 8.10, when installed as a virtual
machine by (1) python-vm-builder or (2) ubuntu-vm-builder in VMBuilder 0.9
in Ubuntu 8.10, have ! (exclamation point) as the default root password,
which allows attackers to bypass intended login restrictions.

Bugs

<http://launchpad.net/bugs/296841>

Notes

Author	Note
jdstrand	not a shadow vulnerability, but is fixed in this package

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchshadow< 1:4.0.13-7ubuntu3.3UNKNOWN
ubuntu7.10noarchshadow< 1:4.0.18.1-9ubuntu0.1UNKNOWN
ubuntu8.04noarchshadow< 1:4.0.18.2-1ubuntu2.1UNKNOWN
ubuntu8.10noarchshadow< 1:4.1.1-1ubuntu1.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	shadow	< 1:4.0.13-7ubuntu3.3	UNKNOWN
ubuntu	7.10	noarch	shadow	< 1:4.0.18.1-9ubuntu0.1	UNKNOWN
ubuntu	8.04	noarch	shadow	< 1:4.0.18.2-1ubuntu2.1	UNKNOWN
ubuntu	8.10	noarch	shadow	< 1:4.1.1-1ubuntu1.1	UNKNOWN

References

launchpad.net/bugs/cve/CVE-2008-5104

nvd.nist.gov/vuln/detail/CVE-2008-5104

security-tracker.debian.org/tracker/CVE-2008-5104

www.cve.org/CVERecord?id=CVE-2008-5104

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

44.9%

JSON

Related for UB:CVE-2008-5104