Vulnerabilities (CVE)

Filtered by vendor Ubuntu Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2006-3597 1 Ubuntu 1 Ubuntu Linux 2008-09-05 7.2 HIGH N/A
passwd before 1:4.0.13 on Ubuntu 6.06 LTS leaves the root password blank instead of locking it when the administrator selects the "Go Back" option after the final "Installation complete" message and uses the main menu, which causes the password to be zeroed out in the installer's memory.
CVE-2006-3378 1 Ubuntu 1 Ubuntu Linux 2008-09-05 7.2 HIGH N/A
passwd command in shadow in Ubuntu 5.04 through 6.06 LTS, when called with the -f, -g, or -s flag, does not check the return code of a setuid call, which might allow local users to gain root privileges if setuid fails in cases such as PAM failures or resource limits.
CVE-2006-7229 1 Ubuntu 1 Linux Kernel 2008-09-05 7.8 HIGH N/A
The skge driver 1.5 in Linux kernel 2.6.15 on Ubuntu does not properly use the spin_lock and spin_unlock functions, which allows remote attackers to cause a denial of service (machine crash) via a flood of network traffic.