7.2

CVE-2008-5103

Exploit
The (1) python-vm-builder and (2) ubuntu-vm-builder implementations in VMBuilder 0.9 in Ubuntu 8.10 omit the -e option when invoking chpasswd with a root:! argument, which configures the root account with a cleartext password of ! (exclamation point) and allows attackers to bypass intended login restrictions.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dcgrendel ≫ Vmbuilder Version0.9
   Ubuntu ≫ Ubuntu Linux Version6.06 Update_nil_ Editionlts
   Ubuntu ≫ Ubuntu Linux Version7.10
   Ubuntu ≫ Ubuntu Linux Version8.04 Update_nil_ Editionlts
   Ubuntu ≫ Ubuntu Linux Version8.10
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.47% 0.37
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://launchpadlibrarian.net/19619929/vm-builder_0.9-0ubuntu3.1.debdiff
Exploit
http://osvdb.org/49996
http://secunia.com/advisories/32697
Patch
Vendor Advisory
http://www.securityfocus.com/bid/32292
Patch
http://www.ubuntu.com/usn/usn-670-1
Vendor Advisory
https://bugs.launchpad.net/ubuntu/+source/vm-builder/+bug/296841
https://exchange.xforce.ibmcloud.com/vulnerabilities/46603