Lucene search

K
cvelistMitreCVELIST:CVE-2018-25078
HistoryJan 25, 2023 - 12:00 a.m.

CVE-2018-25078

2023-01-2500:00:00
mitre
www.cve.org
man-db
vulnerability
local users
root privileges
gentoo

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

man-db before 2.8.5 on Gentoo allows local users (with access to the man user account) to gain root privileges because /usr/bin/mandb is executed by root but not owned by root. (Also, the owner can strip the setuid and setgid bits.)

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%