Every CVE Search/ Get API key

CVE-2006-6008

ftpd in Linux Netkit (linux-ftpd) 0.17, and possibly other versions, does not check the return...

6.5 MediumFix available

ftpd in Linux Netkit (linux-ftpd) 0.17, and possibly other versions, does not check the return status of certain seteuid, setgid, and setuid calls, which might allow remote authenticated users to gain privileges if these calls fail in cases such as PAM failures or resource limits, a different vulnerability than CVE-2006-5778.

Exploit likelihood

2.06%Up 0.8 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.5

ftpd in Linux Netkit (linux-ftpd) 0.17, and possibly other versions, does not check the return status of certain seteuid, setgid, and setuid calls, which might allow remote authenticated users to gain privileges if these calls fail in cases such as PAM failures or resource limits, a different vulnerability than CVE-2006-5778.

Record
CVE-2006-6008
CVSS 2.0
6.5 MediumAV:N/AC:L/Au:S/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

ftpd in Linux Netkit (linux-ftpd) 0.17, and possibly other versions, does not check the return status of certain seteuid, setgid, and setuid calls, which might allow remote authenticated users to gain privileges if these calls fail in cases such as PAM failures or resource limits, a different vulnerability than CVE-2006-5778.

Record
CVE-2006-6008
Updated
2026-11-02
EUVDEUVD-2006-5991 No score

ftpd in Linux Netkit (linux-ftpd) 0.17, and possibly other versions, does not check the return status of certain seteuid, setgid, and setuid calls, which might allow remote authenticated users to gain privileges if these calls fail in cases such as PAM failures or resource limits, a different vulnerability than CVE-2006-5778.

Record
EUVD-2006-5991
Updated
2026-11-03
GitHub AdvisoriesGHSA-hwph-788h-xp87 No score

ftpd in Linux Netkit (linux-ftpd) 0.17, and possibly other versions, does not check the return...

ftpd in Linux Netkit (linux-ftpd) 0.17, and possibly other versions, does not check the return status of certain seteuid, setgid, and setuid calls, which might allow remote authenticated users to gain privileges if these calls fail in cases such as PAM failures or resource limits, a different vulnerability than CVE-2006-5778.

Record
GHSA-hwph-788h-xp87
Updated
2026-11-02
OSV No score

ftpd in Linux Netkit (linux-ftpd) 0.17, and possibly other versions, does not check the return status of certain seteuid, setgid, and setuid calls, which might allow remote authenticated users to gain privileges if these calls fail in cases such as PAM failures or resource limits, a different vulnerability than CVE-2006-5778.

Record
CVE-2006-6008
Updated
2026-11-02
OSVDEBIAN-CVE-2006-6008 No score

ftpd in Linux Netkit (linux-ftpd) 0.17, and possibly other versions, does not check the return status of certain seteuid, setgid, and setuid calls, which might allow remote authenticated users to gain privileges if these calls fail in cases such as PAM failures or resource limits, a different vulnerability than CVE-2006-5778.

Record
DEBIAN-CVE-2006-6008
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
linux-ftpd
Debian:12
before 0.17-23
0.17-23
linux-ftpd
Debian:3.1
From an advisory covering 2 CVEs
before 0.17-20sarge2, plus listed versions
0.17-20
0.17-20sarge2

History

History
RecordedChangedSources
affected, facts
affected
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-6008 is a medium vulnerability (CVSS 6.5) in Netkit, published November 20, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.06%, the 81st percentile. Fixed in linux-ftpd 0.17-23.

References

MoveEnter Open