Vulnerability record · CVE-2006-2194 · published 5 July 2006

CVE-2006-2194: Point-to-point protocol project point-to-point protocol vulnerability

PPoint To Point Protocol Project · Point To Point Protocol

The winbind plugin in pppd for ppp 2.4.4 and earlier does not check the return code from the setuid function call, which might allow local users to gain privileges by causing setuid to fail, such as exceeding PAM limits for the maximum number of user processes, which prevents the winbind NTLM authentication helper from dropping privileges.

7.2 CVSS 2.0 High EPSS 0.40% · top 67.9%

7.2CVSS 2.0 base score

0.40%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

18References

16 Jun 2026Last modified by NVD

Description

AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

PPoint To Point Protocol Point To Point Protocol Project

References

Link	Tags
http://secunia.com/advisories/20963
http://secunia.com/advisories/20967	PatchVendor Advisory
http://secunia.com/advisories/20987	PatchVendor Advisory
http://secunia.com/advisories/20996	PatchVendor Advisory
http://www.debian.org/security/2006/dsa-1106	PatchVendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2006:119
http://www.osvdb.org/26994
http://www.securityfocus.com/bid/18849	Patch
http://www.ubuntu.com/usn/usn-310-1
http://secunia.com/advisories/20963
http://secunia.com/advisories/20967	PatchVendor Advisory
http://secunia.com/advisories/20987	PatchVendor Advisory
http://secunia.com/advisories/20996	PatchVendor Advisory
http://www.debian.org/security/2006/dsa-1106	PatchVendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2006:119
http://www.osvdb.org/26994
http://www.securityfocus.com/bid/18849	Patch
http://www.ubuntu.com/usn/usn-310-1

Track CVE-2006-2194 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2020-8597Point-to-point protocol project point-to-point protocol classic buffer overflow vulnerabilityeap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.EPSS 20%3 Feb 2020 9.8CVE-2018-11574Point-to-point protocol project point-to-point protocol improper input validation vulnerabilityImproper input validation together with an integer overflow in the EAP-TLS protocol implementation in PPPD may cause a crash, information disclosure,…EPSS 1.9%14 Jun 2018 7.5CVE-2014-3158Point-to-point protocol project point-to-point protocol memory buffer overflow vulnerabilityInteger overflow in the getword function in options.c in pppd in Paul's PPP Package (ppp) before 2.4.7 allows attackers to "access privileged options…EPSS 3.5%15 Nov 2014 7.5CVE-2004-2695Jelsoft vbulletin sql injection vulnerabilitySQL injection vulnerability in the Authorize.net callback code (subscriptions/authorize.php) in Jelsoft vBulletin 3.0 through 3.0.3 allows remote att…EPSS 1.9%31 Dec 2004 4.3CVE-2015-3310Canonical ubuntu linux memory buffer overflow vulnerabilityBuffer overflow in the rc_mksid function in plugins/radius/util.c in Paul's PPP Package (ppp) 2.4.6 and earlier, when the PID for pppd is greater tha…EPSS 5.4%24 Apr 2015

Source: NIST National Vulnerability Database (record CVE-2006-2194), CISA KEV, FIRST EPSS (scores of 2026-10-15). This page is refreshed as NVD updates the record.