CVE-2006-6008
First published: Tue Nov 21 2006(Updated: )
ftpd in Linux Netkit (linux-ftpd) 0.17, and possibly other versions, does not check the return status of certain seteuid, setgid, and setuid calls, which might allow remote authenticated users to gain privileges if these calls fail in cases such as PAM failures or resource limits, a different vulnerability than CVE-2006-5778.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Netkit | =0.17 | |
| =0.17 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=384454
- http://bugs.gentoo.org/show_bug.cgi?id=150292
- http://ftp.debian.org/debian/pool/main/l/linux-ftpd/linux-ftpd_0.17-22.diff.gz
- http://www.gentoo.org/security/en/glsa/glsa-200611-05.xml
- http://secunia.com/advisories/22816
- http://secunia.com/advisories/22853
Frequently Asked Questions
What is the severity of CVE-2006-6008?
CVE-2006-6008 is classified as a high severity vulnerability due to the potential for privilege escalation.
How do I fix CVE-2006-6008?
To fix CVE-2006-6008, update to a version of Linux Netkit that has addressed this vulnerability.
Who is affected by CVE-2006-6008?
CVE-2006-6008 affects remote authenticated users of Linux Netkit ftpd version 0.17 and possibly other vulnerable versions.
What types of attacks are possible due to CVE-2006-6008?
Exploitation of CVE-2006-6008 could allow remote authenticated users to gain elevated privileges on the system.
Is there a workaround for CVE-2006-6008?
There are no known workarounds for CVE-2006-6008, and it is recommended to apply available patches.
- agent/references
- agent/type
- agent/remedy
- agent/first-publish-date
- agent/weakness
- agent/severity
- agent/author
- agent/description
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/netkit
- product/netkit
- canonical/netkit netkit
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/event
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- canonical/netkit
- version/netkit/0.17