CVE-2006-3378: High severity Ubuntu Ubuntu Linux vulnerability
passwd command in shadow in Ubuntu 5.04 through 6.06 LTS, when called with the -f, -g, or -s flag, does not check the return code of a setuid call, which might allow local users to gain root privileges if setuid fails in cases such as PAM failures or resource limits.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-3378?
CVE-2006-3378 is considered a high-severity vulnerability due to the potential for local users to gain root privileges.
How do I fix CVE-2006-3378?
To fix CVE-2006-3378, upgrade the affected versions of Ubuntu to a patched version that addresses this vulnerability.
Which Ubuntu versions are affected by CVE-2006-3378?
CVE-2006-3378 affects Ubuntu 5.04, 5.10, and 6.06 LTS across various architectures like amd64, i386, sparc, and powerpc.
What are the risks associated with CVE-2006-3378?
The risks associated with CVE-2006-3378 include potential unauthorized access to root privileges, leading to a complete compromise of the affected system.
Is CVE-2006-3378 a remote or local vulnerability?
CVE-2006-3378 is a local vulnerability, meaning it requires physical or authenticated access to the system to exploit.