CVE-2006-6008 Privilege escalation in n/a
Remote authenticated users can gain privileges in Linux Netkit ftpd if system calls fail due to unchecked return values.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2006-6008?
CVE-2006-6008 is a medium-severity vulnerability in n/a, published on 21 Nov 2006. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
ftpd in Linux Netkit (linux-ftpd) 0.17, and possibly other versions, does not check the return status of certain seteuid, setgid, and setuid calls, which might allow remote authenticated users to gain privileges if these calls fail in cases such as PAM failures or resource limits, a different vulnerability than CVE-2006-5778.
Which versions are affected by CVE-2006-6008?
It affects 1 product.
Products include Netkit Netkit.
How do I fix CVE-2006-6008?
Apply the vendor's patch.
Is CVE-2006-6008 being exploited?
There is no known exploitation of CVE-2006-6008 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2006-6008, GHSA-hwph-788h-xp87.