Ubuntu vm-builder Local Security Bypass Vulnerability

Bugtraq ID:	32292
Class:	Access Validation Error
CVE:	CVE-2008-5104 CVE-2008-5103
Remote:	No
Local:	Yes
Published:	Nov 13 2008 12:00AM
Updated:	Jul 05 2016 10:01PM
Credit:	Mathias Gug
Vulnerable:	Ubuntu Ubuntu Linux 8.10 sparc Ubuntu Ubuntu Linux 8.10 powerpc Ubuntu Ubuntu Linux 8.10 lpia Ubuntu Ubuntu Linux 8.10 i386 Ubuntu Ubuntu Linux 8.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 7.10 sparc Ubuntu Ubuntu Linux 7.10 powerpc Ubuntu Ubuntu Linux 7.10 lpia Ubuntu Ubuntu Linux 7.10 i386 Ubuntu Ubuntu Linux 7.10 amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64
Not Vulnerable:

Ubuntu vm-builder Local Security Bypass Vulnerability

Ubuntu 'vm-builder' is prone to a local security-bypass vulnerability.

Successful exploits may allow unauthorized attackers to gain root access on the virtual machine by predicting the password.

This issue affects the following releases:

Ubuntu 6.06 LTS
Ubuntu 7.10
Ubuntu 8.04 LTS
Ubuntu 8.10

Ubuntu vm-builder Local Security Bypass Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Ubuntu vm-builder Local Security Bypass Vulnerability

Solution:
Fixes are available. Please see the references for more information.


Ubuntu Ubuntu Linux 7.10 i386

• Ubuntu login_4.0.18.1-9ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/s/shadow/login_4.0.18.1-9u buntu0.1_i386.deb


• Ubuntu passwd_4.0.18.1-9ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/s/shadow/passwd_4.0.18.1-9 ubuntu0.1_i386.deb

Ubuntu Ubuntu Linux 8.10 lpia

• Ubuntu login_4.1.1-1ubuntu1.1_lpia.deb
  http://ports.ubuntu.com/pool/main/s/shadow/login_4.1.1-1ubuntu1.1_lpia .deb


• Ubuntu passwd_4.1.1-1ubuntu1.1_lpia.deb
  http://ports.ubuntu.com/pool/main/s/shadow/passwd_4.1.1-1ubuntu1.1_lpi a.deb

Ubuntu Ubuntu Linux 6.06 LTS amd64

• Ubuntu login_4.0.13-7ubuntu3.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/s/shadow/login_4.0.13-7ubu ntu3.3_amd64.deb


• Ubuntu passwd_4.0.13-7ubuntu3.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/s/shadow/passwd_4.0.13-7ub untu3.3_amd64.deb

Ubuntu Ubuntu Linux 7.10 powerpc

• Ubuntu login_4.0.18.1-9ubuntu0.1_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/s/shadow/login_4.0.18.1-9u buntu0.1_powerpc.deb


• Ubuntu passwd_4.0.18.1-9ubuntu0.1_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/s/shadow/passwd_4.0.18.1-9 ubuntu0.1_powerpc.deb

Ubuntu Ubuntu Linux 8.10 sparc

• Ubuntu login_4.1.1-1ubuntu1.1_sparc.deb
  http://ports.ubuntu.com/pool/main/s/shadow/login_4.1.1-1ubuntu1.1_spar c.deb


• Ubuntu passwd_4.1.1-1ubuntu1.1_sparc.deb
  http://ports.ubuntu.com/pool/main/s/shadow/passwd_4.1.1-1ubuntu1.1_spa rc.deb

Ubuntu Ubuntu Linux 8.04 LTS powerpc

• Ubuntu login_4.0.18.2-1ubuntu2.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/s/shadow/login_4.0.18.2-1ubuntu2.1_p owerpc.deb


• Ubuntu passwd_4.0.18.2-1ubuntu2.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/s/shadow/passwd_4.0.18.2-1ubuntu2.1_ powerpc.deb

Ubuntu Ubuntu Linux 8.10 powerpc

• Ubuntu login_4.1.1-1ubuntu1.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/s/shadow/login_4.1.1-1ubuntu1.1_powe rpc.deb


• Ubuntu passwd_4.1.1-1ubuntu1.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/s/shadow/passwd_4.1.1-1ubuntu1.1_pow erpc.deb

Ubuntu Ubuntu Linux 8.10 i386

• Ubuntu login_4.1.1-1ubuntu1.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/s/shadow/login_4.1.1-1ubun tu1.1_i386.deb


• Ubuntu passwd_4.1.1-1ubuntu1.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/s/shadow/passwd_4.1.1-1ubu ntu1.1_i386.deb

Ubuntu Ubuntu Linux 8.04 LTS sparc

• Ubuntu login_4.0.18.2-1ubuntu2.1_sparc.deb
  http://ports.ubuntu.com/pool/main/s/shadow/login_4.0.18.2-1ubuntu2.1_s parc.deb


• Ubuntu passwd_4.0.18.2-1ubuntu2.1_sparc.deb
  http://ports.ubuntu.com/pool/main/s/shadow/passwd_4.0.18.2-1ubuntu2.1_ sparc.deb

Ubuntu Ubuntu Linux 7.10 amd64

• Ubuntu login_4.0.18.1-9ubuntu0.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/s/shadow/login_4.0.18.1-9u buntu0.1_amd64.deb


• Ubuntu passwd_4.0.18.1-9ubuntu0.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/s/shadow/passwd_4.0.18.1-9 ubuntu0.1_amd64.deb

Ubuntu Ubuntu Linux 6.06 LTS sparc

• Ubuntu login_4.0.13-7ubuntu3.3_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/s/shadow/login_4.0.13-7ubu ntu3.3_sparc.deb


• Ubuntu passwd_4.0.13-7ubuntu3.3_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/s/shadow/passwd_4.0.13-7ub untu3.3_sparc.deb

Ubuntu Ubuntu Linux 8.04 LTS i386

• Ubuntu login_4.0.18.2-1ubuntu2.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/s/shadow/login_4.0.18.2-1u buntu2.1_i386.deb


• Ubuntu passwd_4.0.18.2-1ubuntu2.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/s/shadow/passwd_4.0.18.2-1 ubuntu2.1_i386.deb

Ubuntu Ubuntu Linux 8.04 LTS amd64

• Ubuntu login_4.0.18.2-1ubuntu2.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/s/shadow/login_4.0.18.2-1u buntu2.1_amd64.deb


• Ubuntu passwd_4.0.18.2-1ubuntu2.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/s/shadow/passwd_4.0.18.2-1 ubuntu2.1_amd64.deb

Ubuntu Ubuntu Linux 6.06 LTS powerpc

• Ubuntu login_4.0.13-7ubuntu3.3_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/s/shadow/login_4.0.13-7ubu ntu3.3_powerpc.deb


• Ubuntu passwd_4.0.13-7ubuntu3.3_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/s/shadow/passwd_4.0.13-7ub untu3.3_powerpc.deb

Ubuntu Ubuntu Linux 7.10 sparc

• Ubuntu login_4.0.18.1-9ubuntu0.1_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/s/shadow/login_4.0.18.1-9u buntu0.1_sparc.deb


• Ubuntu passwd_4.0.18.1-9ubuntu0.1_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/s/shadow/passwd_4.0.18.1-9 ubuntu0.1_sparc.deb

Ubuntu Ubuntu Linux 8.10 amd64

• Ubuntu login_4.1.1-1ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/s/shadow/login_4.1.1-1ubun tu1.1_amd64.deb


• Ubuntu passwd_4.1.1-1ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/s/shadow/passwd_4.1.1-1ubu ntu1.1_amd64.deb

Ubuntu Ubuntu Linux 8.04 LTS lpia

• Ubuntu login_4.0.18.2-1ubuntu2.1_lpia.deb
  http://ports.ubuntu.com/pool/main/s/shadow/login_4.0.18.2-1ubuntu2.1_l pia.deb


• Ubuntu passwd_4.0.18.2-1ubuntu2.1_lpia.deb
  http://ports.ubuntu.com/pool/main/s/shadow/passwd_4.0.18.2-1ubuntu2.1_ lpia.deb

Ubuntu Ubuntu Linux 6.06 LTS i386

• Ubuntu login_4.0.13-7ubuntu3.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/s/shadow/login_4.0.13-7ubu ntu3.3_i386.deb


• Ubuntu passwd_4.0.13-7ubuntu3.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/s/shadow/passwd_4.0.13-7ub untu3.3_i386.deb

Ubuntu Ubuntu Linux 7.10 lpia

• Ubuntu login_4.0.18.1-9ubuntu0.1_lpia.deb
  http://ports.ubuntu.com/pool/main/s/shadow/login_4.0.18.1-9ubuntu0.1_l pia.deb


• Ubuntu passwd_4.0.18.1-9ubuntu0.1_lpia.deb
  http://ports.ubuntu.com/pool/main/s/shadow/passwd_4.0.18.1-9ubuntu0.1_ lpia.deb

Ubuntu vm-builder Local Security Bypass Vulnerability

References:

• Ubuntu vm-builder Homepage (Ubuntu)