Vulnerability Details CVE-2008-5104
Ubuntu 6.06 LTS, 7.10, 8.04 LTS, and 8.10, when installed as a virtual machine by (1) python-vm-builder or (2) ubuntu-vm-builder in VMBuilder 0.9 in Ubuntu 8.10, have ! (exclamation point) as the default root password, which allows attackers to bypass intended login restrictions.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 19.0%
CVSS Severity
CVSS v2 Score 7.2
References
- http://launchpadlibrarian.net/19619929/vm-builder_0.9-0ubuntu3.1.debdiff
- http://secunia.com/advisories/32697
- http://www.securityfocus.com/bid/32292
- http://www.ubuntu.com/usn/usn-670-1
- https://bugs.launchpad.net/ubuntu/+source/vm-builder/+bug/296841
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46881
- http://launchpadlibrarian.net/19619929/vm-builder_0.9-0ubuntu3.1.debdiff
- http://secunia.com/advisories/32697
- http://www.securityfocus.com/bid/32292
- http://www.ubuntu.com/usn/usn-670-1
- https://bugs.launchpad.net/ubuntu/+source/vm-builder/+bug/296841
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46881
Products affected by CVE-2008-5104
-
cpe:2.3:a:dcgrendel:vmbuilder:0.9
-
cpe:2.3:o:ubuntu:ubuntu_linux:6.06
-
cpe:2.3:o:ubuntu:ubuntu_linux:7.10
-
cpe:2.3:o:ubuntu:ubuntu_linux:8.04
-
cpe:2.3:o:ubuntu:ubuntu_linux:8.10