Ubuntu Linux Passwd Potential Privilege Escalation Vulnerability

Bugtraq ID:	18850
Class:	Design Error
CVE:	CVE-2006-3378
Remote:	No
Local:	Yes
Published:	Jul 05 2006 12:00AM
Updated:	Oct 13 2006 04:09PM
Credit:	Ilja van Sprundel discovered this issue.
Vulnerable:	Ubuntu Ubuntu Linux 5.10 sparc Ubuntu Ubuntu Linux 5.10 powerpc Ubuntu Ubuntu Linux 5.10 i386 Ubuntu Ubuntu Linux 5.10 amd64 Ubuntu Ubuntu Linux 5.0 4 powerpc Ubuntu Ubuntu Linux 5.0 4 i386 Ubuntu Ubuntu Linux 5.0 4 amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1
Not Vulnerable:

Ubuntu Linux Passwd Potential Privilege Escalation Vulnerability

Ubuntu Linux passwd may allow local attackers to gain elevated privileges. A successful attack may lead to a complete compromise.

Ubuntu Linux Passwd Potential Privilege Escalation Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

Ubuntu Linux Passwd Potential Privilege Escalation Vulnerability

Solution:
Ubuntu has released an advisory with fixes to address this issue.

Ubuntu Linux Passwd Potential Privilege Escalation Vulnerability

References: