Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 03/05/2001 Updated: 10/09/2008

CVSS v2 Base Score: 1.2 | Impact Score: 2.9 | Exploitability Score: 1.9

VMScore: 107

Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N

mandb in the man-db package prior to 2.3.16-3 allows local users to overwrite arbitrary files via the command line options (1) -u or (2) -c, which do not drop privileges and follow symlinks.

Vulnerable Product	Search on Vulmon	Subscribe to Product
progeny debian 1.0
debian debian linux 2.2

Ethan Benson found a bug in man-db packages as distributed in Debian GNU/Linux 22 man-db includes a mandb tool which is used to build an index of the manual pages installed on a system When the -u or -c option were given on the command-line to tell it to write its database to a different location it failed to properly drop privileges before crea ...

NVD-CWE-Other http://www.debian.org/security/2001/dsa-056 http://online.securityfocus.com/advisories/3307 http://www.securityfocus.com/bid/2720 https://nvd.nist.gov https://www.debian.org/security/./dsa-056

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2001-1331

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect