NetSight
IP …
medium4.6Public exploit code

CVE-2003-0124

man before 1.5l allows attackers to execute arbitrary code via a malformed man file with improper quotes, which causes the my_xsprintf function to return a str…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

man before 1.5l allows attackers to execute arbitrary code via a malformed man file with improper quotes, which causes the my_xsprintf function to return a string with the value "unsafe," which is then executed as a program via a system call if it is in the search path of the user who runs man.

Affected products

VendorProductAffected versions
Andries BrouwerMan
Versions 1.5h1, 1.5i, 1.5i2, 1.5j, 1.5k

References