Unscored severity · published Mar 13, 2006
CVE-2006-1183
The Ubuntu 5.10 installer does not properly clear passwords from the installer log file (questions.dat), and leaves the log file with world-readable permissions, which allows…
–
CVSS
3.3%
EPSS
No
On KEV
Description
The Ubuntu 5.10 installer does not properly clear passwords from the installer log file (questions.dat), and leaves the log file with world-readable permissions, which allows local users to gain privileges.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.3% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UL
Ubuntu Linux · Ubuntu
5.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-1183
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-1183
secunia.com
http://secunia.com/advisories/19200
securitytracker.com
http://securitytracker.com/id?1015761
www.osvdb.org
http://www.osvdb.org/23868
www.securityfocus.com
http://www.securityfocus.com/bid/17086
www.vupen.com
http://www.vupen.com/english/advisories/2006/0927
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/25170
More from Ubuntu Linux
5.6
CVE-2005-0109
Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to…
5.5
CVE-2006-5648
Ubuntu Linux 6.10 for the PowerPC (PPC) allows local users to cause a denial of service (resource consumption) by using the (1) sys_get_robust_list and (2) sys_set_robust_list…
5.5
CVE-2006-5649
Unspecified vulnerability in the "alignment check exception handling" in Ubuntu 5.10, 6.06 LTS, and 6.10 for the PowerPC (PPC) allows local users to cause a denial of service…
–
CVE-2010-0834
The base-files package before 5.0.0ubuntu7.1 on Ubuntu 9.10 and before 5.0.0ubuntu20.10.04.2 on Ubuntu 10.04 LTS, as shipped on Dell Latitude 2110 netbooks, does not require…
–
CVE-2009-0578
GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and (2) delete requests, which allows local users to change or remove the network…