CVE-2006-2194
point-to-point protocol project point-to-point protocol: no CVSS score yet. EPSS 0.4% chance of exploitation in the next 30 days.
The winbind plugin in pppd for ppp 2.4.4 and earlier does not check the return code from the setuid function call, which might allow local users to gain privileges by causing setuid to fail, such as exceeding PAM limits for the maximum number of user processes, which prevents the winbind NTLM authentication helper from dropping privileges.
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 33% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- point-to-point_protocol_project:point-to-point_protocol