CVE-2006-3597

{"id": "CVE-2006-3597", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2006-07-18T15:37:00.000", "references": [{"url": "http://secunia.com/advisories/21022", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/27091", "source": "cve@mitre.org"}, {"url": "http://www.ubuntu.com/usn/usn-316-1", "tags": ["Exploit", "Patch"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "passwd before 1:4.0.13 on Ubuntu 6.06 LTS leaves the root password blank instead of locking it when the administrator selects the \"Go Back\" option after the final \"Installation complete\" message and uses the main menu, which causes the password to be zeroed out in the installer's memory."}, {"lang": "es", "value": "passwd anterior a 1:4.0.13 sobre Ubuntu 6.06 LTS deja la contrase\u00f1a de root en blanco en vez de cerrarlo cuando el administrador selecciona la opci\u00f3n \"Go Back\" despu\u00e9s del mensaje final \"instalaci\u00f3n completa\" y utiliza el menu principal, lo que provoca que la contrase\u00f1a que se ponga a cero fuera de la memoria del instalador."}], "lastModified": "2008-09-05T21:07:34.090", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B8517E55-4357-4AFD-B571-5533123CB014"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}