CVE-2006-2194

Name	CVE-2006-2194
Description	The winbind plugin in pppd for ppp 2.4.4 and earlier does not check the return code from the setuid function call, which might allow local users to gain privileges by causing setuid to fail, such as exceeding PAM limits for the maximum number of user processes, which prevents the winbind NTLM authentication helper from dropping privileges.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DSA-1106

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
ppp (PTS)	jessie, jessie (lts)	2.4.6-3.1+deb8u1	fixed
	stretch (security), stretch (lts), stretch	2.4.7-1+4+deb9u1	fixed
	buster (security), buster, buster (lts)	2.4.7-2+4.1+deb10u1	fixed
	bullseye	2.4.9-1+1	fixed
	bookworm	2.4.9-1+1.1	fixed
	sid, trixie	2.5.0-1+2	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
ppp	source	sarge	2.4.3-20050321+2sarge1		DSA-1106
ppp	source	(unstable)	2.4.4rel-1	medium