OSVDB ID: 27091 Title: Ubuntu Linux Alternate/Server CD Installer Empty root Password |
Info |
|
|
Dates |
||||
|
|
Description |
Canonical Ltd. Ubuntu contains a flaw that may allow a malicious user to gain access to unauthorized privileges. The issue is triggered when the "Go Back" option is selected after "Installation Complete" message during the installation. This sets the root password to a null string which can be exploited by an attacker to gain unauthorized access to the system. |
Classification |
Location:
Local Access Required
Attack Type: Authentication Management Impact: Loss of Integrity Exploit: Exploit Public Disclosure: OSVDB Verified, Vendor Verified |
Solution |
Upgrade to version 6.06 LTS or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
References |
|
Credit |
|