CVE-2006-3378

passwd command in shadow in Ubuntu 5.04 through 6.06 LTS, when called with the -f, -g, or -s flag, does not check the return code of a setuid call, which might…

published July 6, 2006

CVSS
—
EPSS
0%
Percentile
26.3
In the wild
Unconfirmed
What it is

passwd command in shadow in Ubuntu 5.04 through 6.06 LTS, when called with the -f, -g, or -s flag, does not check the return code of a setuid call, which might allow local users to gain root privileges if setuid fails in cases such as PAM failures or resource limits.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00341 · 26.3th percentile
Published
2006-07-06T20:00Z
EPSS history
Timeline
  • 06 JUL 20:00Z
    passwd command in shadow in Ubuntu 5.04 through 6.06 LTS, when called with the -f, -g, or -s flag, does not check the return code of a setuid call, which might…
    cvelistv5