ppp vulnerability

2006-07-0600:00:00

ubuntu.com

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

25.6%

JSON

Releases

Ubuntu 6.06
Ubuntu 5.10

Details

Marcus Meissner discovered that the winbind plugin of pppd does not
check the result of the setuid() call. On systems that configure PAM
limits for the maximum number of user processes and enable the winbind
plugin, a local attacker could exploit this to execute the winbind
NTLM authentication helper as root. Depending on the local winbind
configuration, this could potentially lead to privilege escalation.

OSVersionArchitecturePackageVersionFilename
Ubuntu6.06noarchppp< 2.4.4b1-1ubuntu3.1UNKNOWN
Ubuntu6.06noarchppp-udeb< 2.4.4b1-1ubuntu3.1UNKNOWN
Ubuntu6.06noarchppp-dev< 2.4.4b1-1ubuntu3.1UNKNOWN
Ubuntu5.10noarchppp< 2.4.3-20050321+2ubuntu1.1UNKNOWN
Ubuntu5.10noarchppp-udeb< 2.4.3-20050321+2ubuntu1.1UNKNOWN
Ubuntu5.10noarchppp-dev< 2.4.3-20050321+2ubuntu1.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	6.06	noarch	ppp	< 2.4.4b1-1ubuntu3.1	UNKNOWN
Ubuntu	6.06	noarch	ppp-udeb	< 2.4.4b1-1ubuntu3.1	UNKNOWN
Ubuntu	6.06	noarch	ppp-dev	< 2.4.4b1-1ubuntu3.1	UNKNOWN
Ubuntu	5.10	noarch	ppp	< 2.4.3-20050321+2ubuntu1.1	UNKNOWN
Ubuntu	5.10	noarch	ppp-udeb	< 2.4.3-20050321+2ubuntu1.1	UNKNOWN
Ubuntu	5.10	noarch	ppp-dev	< 2.4.3-20050321+2ubuntu1.1	UNKNOWN