CVE-2006-1183
The Ubuntu 5.10 installer does not properly clear passwords from the installer log file ...
CVE-2006-1183 is a high vulnerability (CVSS 7.2) in Ubuntu Linux, published March 13, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.30%, the 88th percentile. No source names a fixed version.
The Ubuntu 5.10 installer does not properly clear passwords from the installer log file (questions.dat), and leaves the log file with world-readable permissions, which allows local users to gain privileges.
Exploit likelihood
What each source reports
NVD Score used
The Ubuntu 5.10 installer does not properly clear passwords from the installer log file (questions.dat), and leaves the log file with world-readable permissions, which allows local users to gain privileges.
- Record
CVE-2006-1183- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
The Ubuntu 5.10 installer does not properly clear passwords from the installer log file (questions.dat), and leaves the log file with world-readable permissions, which allows local users to gain privileges.
- Record
CVE-2006-1183- Updated
- 2026-11-02
EUVDEUVD-2006-1187 No score
The Ubuntu 5.10 installer does not properly clear passwords from the installer log file (questions.dat), and leaves the log file with world-readable permissions, which allows local users to gain privileges.
- Record
EUVD-2006-1187- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-crpp-368c-254j No score
The Ubuntu 5.10 installer does not properly clear passwords from the installer log file ...
The Ubuntu 5.10 installer does not properly clear passwords from the installer log file (questions.dat), and leaves the log file with world-readable permissions, which allows local users to gain privileges.
- Record
GHSA-crpp-368c-254j- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Ubuntu 5.10 Installer - Password Disclosure | 2006-03-12 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD |