Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2006-2194

Date: July 5, 2006

The winbind plugin in pppd for ppp 2.4.4 and earlier does not check the return code from the setuid function call, which might allow local users to gain privileges by causing setuid to fail, such as exceeding PAM limits for the maximum number of user processes, which prevents the winbind NTLM authentication helper from dropping privileges.

Severity Score

Related Resources (12)

https://nvd.nist.gov/vuln/detail/CVE-2006-2194
http://www.mandriva.com/security/advisories?name=MDKSA-2006:119
http://www.ubuntu.com/usn/usn-310-1
http://www.osvdb.org/26994
http://secunia.com/advisories/20963
http://secunia.com/advisories/20996
http://secunia.com/advisories/20987
http://secunia.com/advisories/20967
https://people.canonical.com/~ubuntu-security/cve/CVE-2006-2194
http://www.debian.org/security/2006/dsa-1106
http://www.securityfocus.com/bid/18849
https://www.mend.io/vulnerability-database/CVE-2006-2194

Severity Score

CVSS v3.1

Base Score:
Attack Vector (AV): LOCAL
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): HIGH
Availability (A): HIGH

CVSS v2

Base Score:
Access Vector (AV): LOCAL
Access Complexity (AC): LOW
Authentication (AU): NONE
Confidentiality (C): COMPLETE
Integrity (I): COMPLETE
Availability (A): COMPLETE
Additional information:

Do you need more information?

Contact Us