13 matches found
EUVD-2001-1160
Malware in sbrugna...
EUVD-2001-1159
Malware in sbrugna...
SUSE CVE-2003-0645
man-db 2.3.12 and 2.3.18 to 2.4.1 uses certain user-controlled DEFINE directives from the /.manpath file, even when running setuid, which could allow local users to gain privileges...
XFree86 X11R6 3.3.2 XMan ManPath Environment Variable Buffer Overflow
No description provided by source. source: http://www.securityfocus.com/bid/3030/info xman is a component included with the XFree86 Window System. A buffer overflow in the handling of the MANPATH environment variable by xman makes it possible for a local user to execute arbitrary code. By inserti...
CVE-2003-0645: Undefined Security Weakness
man-db 2.3.12 and 2.3.18 to 2.4.1 uses certain user-controlled DEFINE directives from the /.manpath file, even when running setuid, which could allow local users to gain privileges...
CVE-2001-1179
The CVE-2001-1179 issue affects the xman utility. It allows local users to gain privileges by manipulating the MANPATH to point to a man page whose filename contains shell metacharacters, enabling privilege escalation. The connected documents confirm the description but do not provide explicit af...
CVE-2001-1178
CVE-2001-1178 (xman) is a local privilege-escalation vulnerability caused by a buffer overflow triggered by a long MANPATH environment variable. Affected component: xman. Root cause: insufficient bounds checking on MANPATH leading to overflow. Impact: local users may gain privileges; exploitation...
CVE-2001-1178
Buffer overflow in xman allows local users to gain privileges via a long MANPATH environment variable...
CVE-2001-1179
xman allows local users to gain privileges by modifying the MANPATH to point to a man page whose filename contains shell metacharacters...
CVE-2001-1179: Undefined Security Weakness
xman allows local users to gain privileges by modifying the MANPATH to point to a man page whose filename contains shell metacharacters...
CVE-2001-1178: Undefined Security Weakness
Buffer overflow in xman allows local users to gain privileges via a long MANPATH environment variable...
