CVE-2006-2194

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-07-05 · updated 2026-06-16

Description

The winbind plugin in pppd for ppp 2.4.4 and earlier does not check the return code from the setuid function call, which might allow local users to gain privileges by causing setuid to fail, such as exceeding PAM limits for the maximum number of user processes, which prevents the winbind NTLM authentication helper from dropping privileges.

Affected products

Point-To-Point Protocol Project Point-To-Point Protocol: through 2.4.4

References

http://secunia.com/advisories/20963
http://secunia.com/advisories/20967
http://secunia.com/advisories/20987
http://secunia.com/advisories/20996
http://www.debian.org/security/2006/dsa-1106
http://www.mandriva.com/security/advisories?name=MDKSA-2006:119
http://www.osvdb.org/26994
http://www.securityfocus.com/bid/18849
http://www.ubuntu.com/usn/usn-310-1
http://secunia.com/advisories/20963
http://secunia.com/advisories/20967
http://secunia.com/advisories/20987

Get alerted when CVE-2006-2194 or the next vulnerability affects your stack