Debian/linux-ftpd: unknown

ftpd in linux-ftpd 0.17, and possibly other versions, performs a chdir before setting the UID, which allows local users to bypass intended access restrictions by redirecting their home directory to a

Action: Upgrade linux-ftpd to 0.17-23 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2006-5778
• https://security-tracker.debian.org/tracker/CVE-2006-5778

published 2006-11-07T18:07:00Z · modified 2026-10-22T23:47:29.019200189Z · JSON