ISOMAN

CVE

CVE-2006-7094

ftpd, as used by Gentoo and Debian Linux, sets the gid to the effective uid instead of the effective group id before executing /bin/ls, which allows remote authenticated users to list arbitrary directories with the privileges of gid 0 and possibly enable additional attack vectors.

Severity
HIGH
CVSS
8.5
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Gentoo2026.05.31 amd64 minimal installunknownsource
Gentoo2026.05.10 amd64 liveguiunknownsource
Gentoo2026.06.07 arm64 minimal installunknownsource
Gentoo2026.05.05 x86 minimal installunknownsource
Gentoo2026.06.11 powerpc minimal installunknownsource
Gentoo2026.06.11 powerpc minimal-dist installunknownsource
Gentoo2026.05.27 ppc64le minimal installunknownsource
Gentoo2026.05.27 sparc64 minimal installunknownsource
Gentoo2026.05.27 sparc64 minimal-dist installunknownsource
Gentoo2026.06.13 sparc64 minimal installunknownsource
Gentoo2026.06.13 sparc64 minimal-dist installunknownsource
Gentoo2026.06.14 arm64 minimal installunknownsource
Gentoo2026.06.16 x86 minimal installunknownsource
Gentoo2026.06.17 sparc64 minimal installunknownsource
Gentoo2026.06.17 sparc64 minimal-dist installunknownsource
Gentoo2026.06.21 arm64 minimal installunknownsource
Gentoo2026.06.23 x86 minimal installunknownsource
Gentoo2026.06.25 powerpc minimal installunknownsource
Gentoo2026.06.25 powerpc minimal-dist installunknownsource
Gentoo2026.07.05 amd64 minimal installunknownsource
Gentoo2026.07.05 arm64 minimal installunknownsource
Gentoo2026.07.07 x86 minimal installunknownsource
Gentoo2026.07.09 powerpc minimal installunknownsource
Gentoo2026.07.09 powerpc minimal-dist installunknownsource
Gentoo2026.07.08 sparc64 minimal installunknownsource
Gentoo2026.07.08 sparc64 minimal-dist installunknownsource
Gentoo2026.07.12 amd64 minimal installunknownsource
Gentoo2026.07.12 amd64 liveguiunknownsource
Gentoo2026.07.12 arm64 minimal installunknownsource
Gentoo2026.07.14 x86 minimal installunknownsource
Gentoo2026.07.15 sparc64 minimal installunknownsource
Gentoo2026.07.15 sparc64 minimal-dist installunknownsource
Gentoo2026.07.16 powerpc minimal installunknownsource
Gentoo2026.07.16 powerpc minimal-dist installunknownsource
Gentoo2026.07.19 arm64 minimal installunknownsource
Gentoo2026.07.21 x86 minimal installunknownsource
Gentoo2026.07.23 powerpc minimal installunknownsource
Gentoo2026.07.23 powerpc minimal-dist installunknownsource
Gentoo2026.07.22 sparc64 minimal installunknownsource
Gentoo2026.07.22 sparc64 minimal-dist installunknownsource
Gentoo2026.07.26 arm64 minimal installunknownsource
Gentoo2026.07.28 x86 minimal installunknownsource
Gentoo2026.07.29 sparc64 minimal installunknownsource
Gentoo2026.07.29 sparc64 minimal-dist installunknownsource
Gentoo2026.07.30 powerpc minimal installunknownsource
Gentoo2026.07.30 powerpc minimal-dist installunknownsource
Gentoo2026.08.02 arm64 minimal installunknownsource
Gentoo2026.08.04 x86 minimal installunknownsource
Gentoo2026.08.06 powerpc minimal installunknownsource
Gentoo2026.08.06 powerpc minimal-dist installunknownsource
Gentoo2026.08.09 arm64 minimal installunknownsource
Gentoo2026.08.11 amd64 minimal installunknownsource
Gentoo2026.08.11 amd64 liveguiunknownsource
Gentoo2026.08.11 x86 minimal installunknownsource
Gentoo2026.08.13 powerpc minimal installunknownsource
Gentoo2026.08.13 powerpc minimal-dist installunknownsource
Gentoo2026.08.05 sparc64 minimal installunknownsource
Gentoo2026.08.05 sparc64 minimal-dist installunknownsource
Gentoo2026.08.16 amd64 minimal installunknownsource
Gentoo2026.08.16 arm64 minimal installunknownsource
Gentoo2026.08.18 x86 minimal installunknownsource
Gentoo2026.08.20 powerpc minimal installunknownsource
Gentoo2026.08.20 powerpc minimal-dist installunknownsource
Gentoo2026.08.19 sparc64 minimal installunknownsource
Gentoo2026.08.19 sparc64 minimal-dist installunknownsource
Gentoo2026.08.23 amd64 minimal installunknownsource
Gentoo2026.08.23 amd64 liveguiunknownsource
Gentoo2026.08.23 arm64 minimal installunknownsource
Gentoo2026.08.25 x86 minimal installunknownsource
Gentoo2026.08.26 sparc64 minimal installunknownsource
Gentoo2026.08.26 sparc64 minimal-dist installunknownsource
Gentoo2026.08.27 powerpc minimal installunknownsource
Gentoo2026.08.27 powerpc minimal-dist installunknownsource
Gentoo2026.08.30 amd64 minimal installunknownsource
Gentoo2026.08.30 amd64 liveguiunknownsource
Gentoo2026.08.30 arm64 minimal installunknownsource
Gentoo2026.08.30 x86 minimal installunknownsource
Gentoo2026.09.01 x86 minimal installunknownsource
Gentoo2026.09.03 powerpc minimal installunknownsource
Gentoo2026.09.03 powerpc minimal-dist installunknownsource
Gentoo2026.09.06 amd64 minimal installunknownsource
Gentoo2026.09.06 arm64 minimal installunknownsource
Gentoo2026.09.06 amd64 liveguiunknownsource
Gentoo2026.09.08 x86 minimal installunknownsource

References

  1. http://bugs.debian.org/384454
  2. http://bugs.gentoo.org/show_bug.cgi?id=155317
  3. http://osvdb.org/34242
  4. http://packages.qa.debian.org/l/linux-ftpd/news/20061125T181702Z.html
  5. http://securityreason.com/securityalert/2330
  6. http://www.securityfocus.com/archive/1/460742/100/0/threaded
  7. http://bugs.debian.org/384454
  8. http://bugs.gentoo.org/show_bug.cgi?id=155317
  9. http://osvdb.org/34242
  10. http://packages.qa.debian.org/l/linux-ftpd/news/20061125T181702Z.html
  11. http://securityreason.com/securityalert/2330
  12. http://www.securityfocus.com/archive/1/460742/100/0/threaded