|
|
Info |
Last Modified |
| 6 months ago |
|
|
|
|
Description |
Canonical Ltd. Ubuntu contains a flaw that may allow a malicious user to gain access to unauthorized privileges. The issue is triggered when the "Go Back" option is selected after "Installation Complete" message during the installation. This sets the root password to a null string which can be exploited by an attacker to gain unauthorized access to the system.
|
|
Classification |
Location:
Local Access Required
Attack Type:
Authentication Management
Impact:
Loss of Integrity
Exploit:
Exploit Available
Disclosure:
OSVDB Verified
|
|
Technical |
Installations from the 'alternate install CD' and the 'server install CD' only are affected by this flaw.
Installations from the 'alternate install CD' and the 'server install CD' when the user selected "Continue" after the "Installation Complete" message was first displayed are not affected by this flaw.
Installations from the 'desktop CD' are not affected since the 'desktop CD' doesn't have this flaw.
|
|
Solution |
Upgrade to version 6.06 LTS or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
|
|
Products |
|
Ubuntu
 |
6.06 |
|
|
|
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
