CVE-2006-6008

2006-11-2100:00:00

ubuntu.com

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

73.1%

JSON

ftpd in Linux Netkit (linux-ftpd) 0.17, and possibly other versions, does
not check the return status of certain seteuid, setgid, and setuid calls,
which might allow remote authenticated users to gain privileges if these
calls fail in cases such as PAM failures or resource limits, a different
vulnerability than CVE-2006-5778.

OSVersionArchitecturePackageVersionFilename
ubuntu7.04noarchlinux-ftpd< 0.17-23UNKNOWN
ubuntu7.10noarchlinux-ftpd< 0.17-23UNKNOWN
ubuntu8.04noarchlinux-ftpd< 0.17-23UNKNOWN
ubuntu8.10noarchlinux-ftpd< 0.17-23UNKNOWN
ubuntu9.04noarchlinux-ftpd< 0.17-23UNKNOWN
ubuntu9.10noarchlinux-ftpd< 0.17-23UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	7.04	noarch	linux-ftpd	< 0.17-23	UNKNOWN
ubuntu	7.10	noarch	linux-ftpd	< 0.17-23	UNKNOWN
ubuntu	8.04	noarch	linux-ftpd	< 0.17-23	UNKNOWN
ubuntu	8.10	noarch	linux-ftpd	< 0.17-23	UNKNOWN
ubuntu	9.04	noarch	linux-ftpd	< 0.17-23	UNKNOWN
ubuntu	9.10	noarch	linux-ftpd	< 0.17-23	UNKNOWN