medium4.6Public exploit code
CVE-2003-0645
man-db 2.3.12 and 2.3.18 to 2.4.1 uses certain user-controlled DEFINE directives from the ~/.manpath file, even when running setuid, which could allow local us…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- man-db 2.4.1 - 'open_cat_stream()' Local uid=man2003-08-06 · local · linux · Verified
Impact
man-db 2.3.12 and 2.3.18 to 2.4.1 uses certain user-controlled DEFINE directives from the ~/.manpath file, even when running setuid, which could allow local users to gain privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Andries Brouwer | Man | Versions 2.3.20, 2.4.1 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=106018504800341&w=2
- http://www.debian.org/security/2003/dsa-364
- http://www.securityfocus.com/bid/8352
- https://exchange.xforce.ibmcloud.com/vulnerabilities/12848
- http://marc.info/?l=bugtraq&m=106018504800341&w=2
- http://www.debian.org/security/2003/dsa-364
- http://www.securityfocus.com/bid/8352
- https://exchange.xforce.ibmcloud.com/vulnerabilities/12848