NVD

Id
64353  
Name
CVE-2006-5778  
Description
ftpd in linux-ftpd 0.17, and possibly other versions, performs a chdir before setting the UID, which allows local users to bypass intended access restrictions by redirecting their home directory to a restricted directory.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-11-07  
Modified Date
2008-09-05  
Seq
2006-5778  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
335805 64353 CVE-2006-5778 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=384454  View
335806 64353 CVE-2006-5778 20060825 ftpd chdir() while root  View
335807 64353 CVE-2006-5778 GLSA-200611-05  View
335808 64353 CVE-2006-5778 DSA-1217  View
335809 64353 CVE-2006-5778 21000  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60111 JVNDB-2006-002377 linux-ftpd の ftpd におけるアクセス制限を回避される脆弱性 linux-ftpd の ftpd は、UID を設定する前に chdir を実行するため、アクセス制限を回避される脆弱性が存在します。 CVE-2006-5778 21880 CVE-2006-5778 64353 4.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002377.html 2006-08-24 2012-09-25 View