CVE-2006-6614
Low
Description
The save_log_local function in Fully Automatic Installation (FAI) 2.10.1, and possibly 3.1.2, when verbose mode is enabled, stores the root password hash in /var/log/fai/current/fai.log, whose file permissions allow it to be copied to other hosts when fai-savelog is called and allows attackers to obtain the hash.
SeverityLow
CVSS1.9
Exploit probability—
Product
Thomas Lange Fully Automated Installation
PublishedDec 18, 2006
First seenDec 18, 2006
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| thomas_lange fully_automated_installation | 2.1, 3.1.2 | — |
| debian debian_linux | 3.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.