Local Privilege Escalation in Ubuntu Password Command

CVE-2006-3378

What is CVE-2006-3378?

The passwd command in the shadow package for Ubuntu versions 5.04 through 6.06 LTS contains a flaw that arises when the command is executed with certain flags (-f, -g, or -s). This flaw prevents proper validation of the return code from a setuid call, which potentially allows local users to gain root privileges if the setuid operation fails due to conditions such as PAM failures or resource limitations. This vulnerability underscores the importance of rigorous error checking in privileged commands to prevent unauthorized access.

References