CVE-2006-3378

CVE-2006-3378 describes a privilege escalation vulnerability in the passwd command within Ubuntu 5.04 through 6.06 LTS. When invoked with specific flags (-f, -g, or -s), the command fails to properly check the return code of a setuid call, potentially allowing local users to gain root privileges if setuid fails due to issues like PAM failures or resource limits. This vulnerability has a CVSS score of 7.2, indicating high severity with local access, low attack complexity, and complete confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.