Lucene search

K
prionPRIOn knowledge basePRION:CVE-2018-25078
HistoryJan 26, 2023 - 9:15 p.m.

Code injection

2023-01-2621:15:00
PRIOn knowledge base
www.prio-n.com
2
code injection
privilege escalation
man-db
gentoo
security vulnerability

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

man-db before 2.8.5 on Gentoo allows local users (with access to the man user account) to gain root privileges because /usr/bin/mandb is executed by root but not owned by root. (Also, the owner can strip the setuid and setgid bits.)

CPENameOperatorVersion
man-dblt2.8.5

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%