CVE-2006-1319

Severity: medium (CVSS 6.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-03-20 · updated 2026-06-16

Description

chpst in runit 1.3.3-1 for Debian GNU/Linux, when compiled on little endian i386 machines against dietlibc, does not properly handle when multiple groups are specified in the -u option, which causes chpst to assign permissions for the root group due to inconsistent bit sizes for the gid_t type.

Affected products

Runit: 1.3.3.1

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=356016
http://secunia.com/advisories/19323
http://www.securityfocus.com/bid/17179
https://exchange.xforce.ibmcloud.com/vulnerabilities/25419
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=356016
http://secunia.com/advisories/19323
http://www.securityfocus.com/bid/17179
https://exchange.xforce.ibmcloud.com/vulnerabilities/25419

Get alerted when CVE-2006-1319 or the next vulnerability affects your stack