CVE-2006-2194

State: Published
Severity: Not scored
Published: Jul 5, 2006
Updated: Aug 7, 2024
Reserved: May 4, 2006

Description

The winbind plugin in pppd for ppp 2.4.4 and earlier does not check the return code from the setuid function call, which might allow local users to gain privileges by causing setuid to fail, such as exceeding PAM limits for the maximum number of user processes, which prevents the winbind NTLM authentication helper from dropping privileges.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

MDKSA-2006:119vendor-advisory
26994vdb-entry
DSA-1106vendor-advisory
20963third-party-advisory
20987third-party-advisory
20996third-party-advisory
20967third-party-advisory
18849vdb-entry
USN-310-1vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.