CVE-2006-6614

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2006-6614

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2006-6614.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2006-6614

Downstream

DEBIAN-CVE-2006-6614

Published

2006-12-18T02:28:00Z

Modified

2025-08-09T20:01:27Z

Summary

[none]

Details

The saveloglocal function in Fully Automatic Installation (FAI) 2.10.1, and possibly 3.1.2, when verbose mode is enabled, stores the root password hash in /var/log/fai/current/fai.log, whose file permissions allow it to be copied to other hosts when fai-savelog is called and allows attackers to obtain the hash.

References

http://secunia.com/advisories/23330
http://www.vupen.com/english/advisories/2006/4995
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=402644
http://www.securityfocus.com/bid/21579
https://exchange.xforce.ibmcloud.com/vulnerabilities/30892

CVE-2006-6614

Affected packages