CVE Feed

    Dashboard / CVE / CVE-2006-3597

    CVE-2006-3597

    passwd before 1:4.0.13 on Ubuntu 6.06 LTS leaves the root password blank instead of locking it when the administrator selects the "Go Back" option after the final "Installation complete" message and uses the main menu, which causes the password to be zeroed out in the installer's memory.

    Published:Jul 14, 2006
    Last Modified:Apr 16, 2026
    EPS:Jul 14, 2006
    EPSS Score:0.00056
    CVSS Score:7.2

    Affected Products

    Vendor
    Ubuntu
    Product
    Ubuntu Linux

    Exploits

    http://www.ubuntu.com/usn/usn-316-1http://www.ubuntu.com/usn/usn-316-1

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2010-0834 (CVSS 9.3) — The base-files package before 5.0.0ubuntu7.1 on Ubuntu 9.10 and before 5.0.0ubuntu20.10.04.2 on Ubuntu 10.04 L…
    CVE-2009-2939 (CVSS 6.9) — The postfix.postinst script in the Debian GNU/Linux and Ubuntu postfix 2.5.5 package grants the postfix user w…
    CVE-2009-0365 (CVSS 4.6) — nm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which allows local …
    CVE-2009-0578 (CVSS 6.2) — GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and (2) delete re…
    CVE-2008-5104 (CVSS 7.2) — Ubuntu 6.06 LTS, 7.10, 8.04 LTS, and 8.10, when installed as a virtual machine by (1) python-vm-builder or (2)…
    CVE-2008-5103 (CVSS 7.2) — The (1) python-vm-builder and (2) ubuntu-vm-builder implementations in VMBuilder 0.9 in Ubuntu 8.10 omit the -…
    CVE-2008-2808 (CVSS 4.3) — Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly escape HTML in file:// URLs in dir…
    CVE-2008-0172 (CVSS 5) — The get_repeat_type function in basic_regex_creator.hpp in the Boost regex library (aka Boost.Regex) in Boost …
    CVE-2007-3920 (CVSS 6.2) — GNOME screensaver 2.20 in Ubuntu 7.10, when used with Compiz, does not properly reserve input focus, which all…
    CVE-2007-5365 (CVSS 7.2) — Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High