CVE-2006-6008

2006-11-2123:07:00

Debian Security Bug Tracker

security-tracker.debian.org

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

72.2%

JSON

ftpd in Linux Netkit (linux-ftpd) 0.17, and possibly other versions, does not check the return status of certain seteuid, setgid, and setuid calls, which might allow remote authenticated users to gain privileges if these calls fail in cases such as PAM failures or resource limits, a different vulnerability than CVE-2006-5778.

OSVersionArchitecturePackageVersionFilename
Debian12alllinux-ftpd< 0.17-23linux-ftpd_0.17-23_all.deb
Debian11alllinux-ftpd< 0.17-23linux-ftpd_0.17-23_all.deb