CVE-2006-3597
Last modified
CVE-2006-3597 is a vulnerability of currently unknown severity. passwd before 1:4.0.13 on Ubuntu 6.06 LTS leaves the root password blank instead of locking it when the administrator selects the "Go Back" option after the final "Installation complete" message and uses the main menu, which causes the password to be zeroed out in the installer's memory.. EPSS estimates a 0.54% chance of exploitation in the next 30 days.
Description
passwd before 1:4.0.13 on Ubuntu 6.06 LTS leaves the root password blank instead of locking it when the administrator selects the "Go Back" option after the final "Installation complete" message and uses the main menu, which causes the password to be zeroed out in the installer's memory.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu | Ubuntu Linux | 6.06_lts |
References
- http://secunia.com/advisories/21022Patch, Vendor Advisory
- http://www.ubuntu.com/usn/usn-316-1Exploit, Patch
- http://secunia.com/advisories/21022Patch, Vendor Advisory
- http://www.ubuntu.com/usn/usn-316-1Exploit, Patch
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-3597?
How severe is CVE-2006-3597?
How do I fix CVE-2006-3597?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2006
- CVE-2006-3591Microsoft Internet Explorer 6 allows remote attackers to cau…
- CVE-2006-3592Unspecified vulnerability in the command line interface (CLI…
- CVE-2006-3593The command line interface (CLI) in Cisco Unified CallManage…
- CVE-2006-3594Buffer overflow in Cisco Unified CallManager (CUCM) 5.0(1) t…
- CVE-2006-3595The default configuration of IOS HTTP server in Cisco Router…
- CVE-2006-3596The device driver for Intel-based gigabit network adapters i…
- CVE-2006-3598SQL injection vulnerability in the Sections module for PHP-N…
- CVE-2006-3599SQL injection vulnerability in the Nuke Advanced Classifieds…
- CVE-2006-3600Multiple stack-based buffer overflows in the LookupTRM::look…
- CVE-2006-3601** UNVERIFIABLE ** Unspecified vulnerability in an unspecif…
- CVE-2006-3602Directory traversal vulnerability in jscripts/tiny_mce/tiny_…
- CVE-2006-3603Cross-site scripting (XSS) vulnerability in index.php in Fle…
Are you affected by CVE-2006-3597?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST