Debian/linux-ftpd: unknown

ftpd, as used by Gentoo and Debian Linux, sets the gid to the effective uid instead of the effective group id before executing /bin/ls, which allows remote authenticated users to list arbitrary direct

Action: Upgrade linux-ftpd to 0.17-23 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2006-7094
• https://security-tracker.debian.org/tracker/CVE-2006-7094

published 2007-03-02T21:18:00Z · modified 2026-10-22T23:47:33.307941667Z · JSON