CVE-2008-5103: High severity dcgrendel vmbuilder vulnerability
The (1) python-vm-builder and (2) ubuntu-vm-builder implementations in VMBuilder 0.9 in Ubuntu 8.10 omit the -e option when invoking chpasswd with a root:! argument, which configures the root account with a cleartext password of ! (exclamation point) and allows attackers to bypass intended login restrictions.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5103?
CVE-2008-5103 is considered a medium severity vulnerability due to its potential to allow unauthorized access to the root account.
How do I fix CVE-2008-5103?
To fix CVE-2008-5103, users should upgrade to a patched version of VMBuilder or modify the settings to enforce secure root account configurations.
Which versions are affected by CVE-2008-5103?
CVE-2008-5103 affects VMBuilder version 0.9 on Ubuntu 8.10.
What vulnerabilities does CVE-2008-5103 introduce?
CVE-2008-5103 introduces vulnerabilities that allow attackers to bypass authentication due to improper handling of root passwords.
Is CVE-2008-5103 specific to a particular software or operating system?
Yes, CVE-2008-5103 specifically affects the VMBuilder implementation in Ubuntu 8.10.