CVE-2001-1331

CVE-2001-1331 affects the man-db package’s mandb tool. The vulnerability exists in mandb before version 2.3.16-3, where invoking mandb with -u or -c does not drop privileges and does not drop file-system symlinks, enabling local users to overwrite arbitrary files. Impact is local, potentially ena...

CVE-2001-1331

mandb in the man-db package before 2.3.16-3 allows local users to overwrite arbitrary files via the command line options 1 -u or 2 -c, which do not drop privileges and follow symlinks...

[SECURITY] [DSA-059-1] man-db symlink attack

-----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------------------ Debian Security Advisory DSA-059-1 [email protected] http://www.debian.org/security/ Wichert Akkerman June 12, 2001 -...

Символьные линки в man-db (symbolic link)

Проблема символьных линков в sgid man программе...

[SECURITY] [DSA-059-1] man-db symlink attack

Package : man-db Problem type : symlink attack Debian-specific: no Luki R. reported a bug in man-db: it did handle nested calls of dropeffectiveprivs and regaineffectiveprivs correctly which would cause it to regain privileges to early. This could be abused to make man create files as user man...

[SECURITY] [DSA-056-1] man-db local exploit

Package : man-db Problem type : local file overwrite Debian-specific: no Ethan Benson found a bug in man-db packages as distributed in Debian/GNU/Linux 2.2. man-db includes a mandb tool which is used to build an index of the manual pages installed on a system. When the -u or - -c option were give...

CVE-2001-1331

mandb in the man-db package before 2.3.16-3 allows local users to overwrite arbitrary files via the command line options 1 -u or 2 -c, which do not drop privileges and follow symlinks...

[SECURITY] [DSA 028-1] New man-db packages released

---------------------------------------------------------------------------- Debian Security Advisory DSA-028-1 [email protected] http://www.debian.org/security/ Martin Schulze February 9, 2001 - ---------------------------------------------------------------------------- Package : man-db...

CVE-1999-0730

CVE-1999-0730 concerns the zsoelim program in the Debian man-db package, where a symlink attack allows local users to overwrite files. The vulnerability is described across multiple connected records (Red Hat, CVE listing, NVD) as a local attack with potential complete impact on confidentiality, ...

CVE-1999-0730

The zsoelim program in the Debian man-db package allows local users to overwrite files via a symlink attack...

man-db.zsoelim.symlink.txt

Date: Sat, 12 Jun 1999 14:57:37 -0700 From: [email protected] Reply-To: [email protected] Subject: New version of man-db fixes symlink attack in zsoelim -----BEGIN PGP SIGNED MESSAGE----- We have received reports that the man-db package as supplied in Debian GNU/Linux 2....

CVE-1999-0730

The zsoelim program in the Debian man-db package allows local users to overwrite files via a symlink attack...

PT-1999-1308 · Debian · Man-Db

Name of the Vulnerable Software and Affected Versions: man-db affected versions not specified Description: The issue allows local users to overwrite files via a symlink attack using the zsoelim program in the Debian man-db package. Recommendations: At the moment, there is no information about a...