Vulnerabilities

TI-2003-00119 CVE-2003-0124 · GHSA-g437-46q6-xq6v

man before 1.5l allows attackers to execute arbitrary code via a malformed man file with…

LOW 24

man before 1.5l allows attackers to execute arbitrary code via a malformed man file with improper quotes, which causes the my_xsprintf function to return a string with the value "unsafe," which is then executed as a prog…

CVSS 2.0MEDIUM 4.6 Local No auth Interaction — EPSS 0.01513 Published 2004-09-01 Fixed

TI-2003-00602 CVE-2003-0645 · GHSA-36x9-82rm-pg8f

man-db 2.3.12 and 2.3.18 to 2.4.1 uses certain user-controlled DEFINE directives from the…

LOW 23

man-db 2.3.12 and 2.3.18 to 2.4.1 uses certain user-controlled DEFINE directives from the ~/.manpath file, even when running setuid, which could allow local users to gain privileges.

CVSS 2.0MEDIUM 4.6 Local No auth Interaction — EPSS 0.00742 Published 2003-08-14 No fix listed

TI-2003-00577 CVE-2003-0620 · GHSA-57q8-53w4-9h6q

Multiple buffer overflows in man-db 2.4.1 and earlier, when installed setuid, allow local…

LOW 23

Multiple buffer overflows in man-db 2.4.1 and earlier, when installed setuid, allow local users to gain privileges via (1) MANDATORY_MANPATH, MANPATH_MAP, and MANDB_MAP arguments to add_to_dirlist in manp.c, (2) a long p…

CVSS 2.0MEDIUM 4.6 Local No auth Interaction — EPSS 0.00804 Published 2003-08-01 No fix listed

Vulnerabilities

Filters

man before 1.5l allows attackers to execute arbitrary code via a malformed man file with…

man-db 2.3.12 and 2.3.18 to 2.4.1 uses certain user-controlled DEFINE directives from the…

Multiple buffer overflows in man-db 2.4.1 and earlier, when installed setuid, allow local…