The daily mandb cleanup job in Man-db prior to 2.7.6.1-1 as packaged in Ubuntu and Debian allows local users with access to the man account to gain privileges via vectors involving insecure chown use.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
man-db_project man-db |