{"action":"Upgrade linux-ftpd to 0.17-23 or later.","affected":[{"fixed":"0.17-23","introduced":"0"}],"component":"linux-ftpd","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["0.17-23"],"id":"tcs_01M5N8PM75B48GGTX6D23YHZ6T","modified_at":"2026-10-22T23:47:29.019200189Z","published_at":"2006-11-07T18:07:00Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2006-5778","https://security-tracker.debian.org/tracker/CVE-2006-5778"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2006-5778","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2006-5778"}],"summary":"ftpd in linux-ftpd 0.17, and possibly other versions, performs a chdir before setting the UID, which allows local users to bypass intended access restrictions by redirecting their home directory to a"}