CVE-2008-5104: High severity dcgrendel vmbuilder vulnerability
Ubuntu 6.06 LTS, 7.10, 8.04 LTS, and 8.10, when installed as a virtual machine by (1) python-vm-builder or (2) ubuntu-vm-builder in VMBuilder 0.9 in Ubuntu 8.10, have ! (exclamation point) as the default root password, which allows attackers to bypass intended login restrictions.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5104?
CVE-2008-5104 has a medium severity rating due to its potential to allow unauthorized access to the root account.
How do I fix CVE-2008-5104?
To fix CVE-2008-5104, change the default root password from '!' to a strong, secure password immediately.
Which versions of Ubuntu are affected by CVE-2008-5104?
CVE-2008-5104 affects Ubuntu 6.06 LTS, 7.10, 8.04 LTS, and 8.10 installed via python-vm-builder or ubuntu-vm-builder.
Is the default root password for Ubuntu secure in CVE-2008-5104?
No, the default root password being '!' in CVE-2008-5104 is not secure and can be easily bypassed by attackers.
What can happen if CVE-2008-5104 is exploited?
If CVE-2008-5104 is exploited, attackers can gain unauthorized access to the system as root, leading to potential data theft or system compromise.