PPPD Winbind Plugin Local Privilege Escalation Vulnerability
BID:18849
Info
PPPD Winbind Plugin Local Privilege Escalation Vulnerability
| Bugtraq ID: | 18849 |
| Class: | Design Error |
| CVE: |
CVE-2006-2194 |
| Remote: | No |
| Local: | Yes |
| Published: | Jul 06 2006 12:00AM |
| Updated: | Oct 11 2006 06:54PM |
| Credit: | Marcus Meissner discovered this issue. |
| Vulnerable: |
Ubuntu Ubuntu Linux 5.10 sparc Ubuntu Ubuntu Linux 5.10 powerpc Ubuntu Ubuntu Linux 5.10 i386 Ubuntu Ubuntu Linux 5.10 amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 Paul Mackerras PPPD 2.4.3 Paul Mackerras PPPD 2.4.4b1 Mandriva Linux Mandrake 2006.0 x86_64 Mandriva Linux Mandrake 2006.0 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1 |
| Not Vulnerable: | |
Discussion
PPPD Winbind Plugin Local Privilege Escalation Vulnerability
The 'winbind' plugin of 'pppd' can allow local attackers to gain elevated privileges, which may lead to a complete compromise.
Version 2.4.3 of 'pppd' is reported vulnerable. Other versions may be affected as well.
The 'winbind' plugin of 'pppd' can allow local attackers to gain elevated privileges, which may lead to a complete compromise.
Version 2.4.3 of 'pppd' is reported vulnerable. Other versions may be affected as well.
Exploit / POC
PPPD Winbind Plugin Local Privilege Escalation Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Solution / Fix
PPPD Winbind Plugin Local Privilege Escalation Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].
Please see the references for vendor advisories and more information.
Paul Mackerras PPPD 2.4.4b1
Paul Mackerras PPPD 2.4.3
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].
Please see the references for vendor advisories and more information.
Paul Mackerras PPPD 2.4.4b1
-
Ubuntu ppp-dev_2.4.4b1-1ubuntu3.1_all.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/p/ppp/ppp-dev_2.4.4b1-1ubu ntu3.1_all.deb -
Ubuntu ppp-udeb_2.4.4b1-1ubuntu3.1_amd64.udeb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/p/ppp/ppp-udeb_2.4.4b1-1ub untu3.1_amd64.udeb -
Ubuntu ppp-udeb_2.4.4b1-1ubuntu3.1_i386.udeb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/p/ppp/ppp-udeb_2.4.4b1-1ub untu3.1_i386.udeb -
Ubuntu ppp-udeb_2.4.4b1-1ubuntu3.1_powerpc.udeb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/p/ppp/ppp-udeb_2.4.4b1-1ub untu3.1_powerpc.udeb -
Ubuntu ppp-udeb_2.4.4b1-1ubuntu3.1_sparc.udeb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/p/ppp/ppp-udeb_2.4.4b1-1ub untu3.1_sparc.udeb -
Ubuntu ppp_2.4.4b1-1ubuntu3.1_amd64.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/p/ppp/ppp_2.4.4b1-1ubuntu3 .1_amd64.deb -
Ubuntu ppp_2.4.4b1-1ubuntu3.1_i386.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/p/ppp/ppp_2.4.4b1-1ubuntu3 .1_i386.deb -
Ubuntu ppp_2.4.4b1-1ubuntu3.1_powerpc.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/p/ppp/ppp_2.4.4b1-1ubuntu3 .1_powerpc.deb -
Ubuntu ppp_2.4.4b1-1ubuntu3.1_sparc.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/p/ppp/ppp_2.4.4b1-1ubuntu3 .1_sparc.deb
Paul Mackerras PPPD 2.4.3
-
Debian ppp-dev_2.4.3-20050321+2sarge1_all.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/p/ppp/ppp-dev_2.4.3-20050 321+2sarge1_all.deb -
Debian ppp_2.4.3-20050321+2sarge1_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/p/ppp/ppp_2.4.3-20050321+ 2sarge1_alpha.deb -
Debian ppp_2.4.3-20050321+2sarge1_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/p/ppp/ppp_2.4.3-20050321+ 2sarge1_amd64.deb -
Debian ppp_2.4.3-20050321+2sarge1_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/p/ppp/ppp_2.4.3-20050321+ 2sarge1_arm.deb -
Debian ppp_2.4.3-20050321+2sarge1_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/p/ppp/ppp_2.4.3-20050321+ 2sarge1_hppa.deb -
Debian ppp_2.4.3-20050321+2sarge1_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/p/ppp/ppp_2.4.3-20050321+ 2sarge1_i386.deb -
Debian ppp_2.4.3-20050321+2sarge1_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/p/ppp/ppp_2.4.3-20050321+ 2sarge1_ia64.deb -
Debian ppp_2.4.3-20050321+2sarge1_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/p/ppp/ppp_2.4.3-20050321+ 2sarge1_m68k.deb -
Debian ppp_2.4.3-20050321+2sarge1_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/p/ppp/ppp_2.4.3-20050321+ 2sarge1_mips.deb -
Debian ppp_2.4.3-20050321+2sarge1_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/p/ppp/ppp_2.4.3-20050321+ 2sarge1_mipsel.deb -
Debian ppp_2.4.3-20050321+2sarge1_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/p/ppp/ppp_2.4.3-20050321+ 2sarge1_powerpc.deb -
Debian ppp_2.4.3-20050321+2sarge1_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/p/ppp/ppp_2.4.3-20050321+ 2sarge1_s390.deb -
Debian ppp_2.4.3-20050321+2sarge1_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/p/ppp/ppp_2.4.3-20050321+ 2sarge1_sparc.deb -
Mandriva ppp-2.4.3-9.1.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva ppp-2.4.3-9.1.20060mdk.x86_64.rpm
Mandriva Linux 2006.0:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva ppp-devel-2.4.3-9.1.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva ppp-dhcp-2.4.3-9.1.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva ppp-dhcp-2.4.3-9.1.20060mdk.x86_64.rpm
Mandriva Linux 2006.0:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva ppp-pppoatm-2.4.3-9.1.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva ppp-pppoe-2.4.3-9.1.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva ppp-pppoe-2.4.3-9.1.20060mdk.x86_64.rpm
Mandriva Linux 2006.0:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva ppp-prompt-2.4.3-9.1.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva ppp-prompt-2.4.3-9.1.20060mdk.x86_64.rpm
Mandriva Linux 2006.0:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva ppp-radius-2.4.3-9.1.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva ppp-radius-2.4.3-9.1.20060mdk.x86_64.rpm
Mandriva Linux 2006.0:
http://wwwnew.mandriva.com/en/downloads/
References
PPPD Winbind Plugin Local Privilege Escalation Vulnerability
References:
References:
- PPPD Home Page (Paul Mackerras)