NVD

Id
64569  
Name
CVE-2006-6008  
Description
ftpd in Linux Netkit (linux-ftpd) 0.17, and possibly other versions, does not check the return status of certain seteuid, setgid, and setuid calls, which might allow remote authenticated users to gain privileges if these calls fail in cases such as PAM failures or resource limits, a different vulnerability than CVE-2006-5778.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-11-21  
Modified Date
2008-09-05  
Seq
2006-6008  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
336993 64569 CVE-2006-6008 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=384454  View
336994 64569 CVE-2006-6008 http://bugs.gentoo.org/show_bug.cgi?id=150292  View
336995 64569 CVE-2006-6008 http://ftp.debian.org/debian/pool/main/l/linux-ftpd/linux-ftpd_0.17-22.diff.gz  View
336996 64569 CVE-2006-6008 GLSA-200611-05  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60166 JVNDB-2006-002432 Linux Netkit の ftpd における権限を取得される脆弱性 Linux Netkit (linux-ftpd) の ftpd は、特定の seteuid、setgid、および setuid 呼び出しのリターンステイタスをチェックしないため、権限を取得される脆弱性が存在します。 CVE-2006-6008 22110 CVE-2006-6008 64569 6.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002432.html 2006-11-10 2012-09-25 View