|
Vulnerability Assessment & Network Security Forums |
|||||||||
If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery. Home >> Browse Vulnerability Assessment Database >> Ubuntu Local Security Checks >> USN262-1 : Ubuntu 5.10 installer vulnerability Vulnerability Assessment Details
|
USN262-1 : Ubuntu 5.10 installer vulnerability |
||
Ubuntu 5.10 installer vulnerability Detailed Explanation for this Vulnerability Assessment Summary : These remote packages are missing security patches : - base-config - login - passwd Description : Karl Øie discovered that the Ubuntu 5.10 installer failed to clean passwords in the installer log files. Since these files were world-readable, any local user could see the password of the first user account, which has full sudo rights by default. The updated packages remove the passwords and additionally make the log files readable only by root. This does not affect the Ubuntu 4.10, 5.04, or the upcoming 6.04 installer. However, if you upgraded from Ubuntu 5.10 to the current development version of Ubuntu 6.04 ('Dapper Drake'), please ensure that you upgrade the passwd package to version 1:4.0.13-7ubuntu2 to fix the installer log files. Solution : Upgrade to : - base-config-2.67ubuntu20 (Ubuntu 5.10) - login-4.0.3-37ubuntu8 (Ubuntu 5.10) - passwd-4.0.3-37ubuntu8 (Ubuntu 5.10) Network Security Threat Level: High Networks Security ID: Vulnerability Assessment Copyright: Ubuntu Security Notice (C) 2005 Canonical, Inc. / NASL script (C) 2005 Michel Arboi |
||
Cables, Connectors |
SIDKick Pico Commodore 64 and 128 (C64 / C128) - MOS SID 6581 / 8580 Replacement
$19.99
Commodore 1541-II Floppy Disk Drive 5.25 C64 with Power Supply (Works)
$125.00
Commodore 128 Computer With Power Supply, Box, Manuals, 1571, 1541, Untested
$450.00
Commodore 128 Personal Computer Working Tested
$199.99
$160.00
Commodore 64 Game Lot Untested 5 Games And Fast Load Cart. *Read Description*
$56.00
Vintage Commodore VIC 20 Computer Untested No Power Adapter MADE IN USA Keyboard
$59.99
TeensyROM Cartridge for Commodore 64/128: MIDI, Fastload, Emulation, and Network
$65.00
RARE Commodore KS64C Personal Computer Keyboard #’d 292/500 - Great Condition
$299.99
C64 PSU - Commodore 64 Power Supply - GRAY, LED, Power Switch (US plug)
$48.49
|
||
No Discussions have been posted on this vulnerability. |