Home > Vulnerability Database > CVE-2024-58250

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2024-58250

Good to know:

Date: April 21, 2025

The passprompt plugin in pppd in ppp before 2.5.2 mishandles privileges.

Severity Score

9.3

Related Resources (6)

Url: https://ppp.samba.org

Url: https://nvd.nist.gov/vuln/detail/CVE-2024-58250

Url: https://github.com/ppp-project/ppp/commit/0a66ad22e54c72690ec2a29a019767c55c5281fc

Url: https://github.com/ppp-project/ppp/compare/v2.5.1...v2.5.2

Url: https://security-tracker.debian.org/tracker/CVE-2024-58250

Url: https://www.mend.io/vulnerability-database/CVE-2024-58250

Severity Score

9.3

Weakness Type (CWE)

Untrusted Search Path

CWE-426

Top Fix

Upgrade Version

Upgrade to version https://github.com/ppp-project/ppp.git - v2.5.2

CVSS v3.1

Base Score:	9.3
Attack Vector (AV):	LOCAL
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	CHANGED
Confidentiality (C):	HIGH
Integrity (I):	HIGH
Availability (A):	HIGH

Do you need more information?

Contact Us