CVE-2006-6614: Debian Linux

Low severity, CVSS 1.9. EPSS: 0.4% chance of exploitation in the next 30 days.

The save_log_local function in Fully Automatic Installation (FAI) 2.10.1, and possibly 3.1.2, when verbose mode is enabled, stores the root password hash in /var/log/fai/current/fai.log, whose file permissions allow it to be copied to other hosts when fai-savelog is called and allows attackers to obtain the hash.

Affected products

• Debian Debian Linux: version 3.1 only
• Thomas Lange Fully Automated Installation: version 2.1 only; version 3.1.2 only

Published 2006-12-18. Last modified 2026-06-16.