Description
The Ubuntu 5.10 installer does not properly clear passwords from the installer log file (questions.dat), and leaves the log file with world-readable permissions, which allows local users to gain privileges.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Kristian Hermansen · perllocallinux
https://www.exploit-db.com/exploits/1579
References (8)
Scores
EPSS
0.0010
EPSS Percentile
26.6%
Details
Status
published
Products (1)
ubuntu/ubuntu_linux
5.10
Published
Mar 13, 2006
Tracked Since
Feb 18, 2026