CVE-2006-2194

2006-07-0500:00:00

ubuntu.com

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

25.6%

JSON

The winbind plugin in pppd for ppp 2.4.4 and earlier does not check the
return code from the setuid function call, which might allow local users to
gain privileges by causing setuid to fail, such as exceeding PAM limits for
the maximum number of user processes, which prevents the winbind NTLM
authentication helper from dropping privileges.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchppp< 2.4.4b1-1ubuntu3.1UNKNOWN
ubuntu6.10noarchppp< 2.4.4rel-1ubuntu1UNKNOWN
ubuntu7.04noarchppp< 2.4.4rel-1ubuntu1UNKNOWN