PT-2003-1750 · Man Db · Man-Db

Vade 79 · Published 2003-08-01 · Updated 2016-10-18 · CVE-2003-0620

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: man-db versions 2.4.1 and earlier

Description: The issue concerns buffer overflows that can be exploited by local users to gain privileges. This can occur through various means, including the MANDATORY MANPATH, MANPATH MAP, and MANDB MAP arguments to the add to dirlist function in manp.c, a long pathname to ult src in ult src.c, a long .so argument to test for include in ult src.c, a long MANPATH environment variable, or a long PATH environment variable.

Recommendations: For man-db versions 2.4.1 and earlier, consider removing the setuid bit to prevent privilege escalation until a patch is available. As a temporary workaround, restrict the use of the add to dirlist function, ult src function, and test for include function to minimize the risk of exploitation. Avoid using long pathnames, .so arguments, MANPATH environment variables, or PATH environment variables in the affected functions until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2003-0620

DSA-364

Affected Products

Man-Db

References · 8

• 🔥 https://exploit-db.com/exploits/22971 · Exploit
• https://security-tracker.debian.org/tracker/CVE-2003-0620 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-0620 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2003-0620 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2003-0620 · Vendor Advisory
• http://debian.org/security/2003/dsa-364 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=105960276803617&w=2 · Note
• http://marc.info/?l=bugtraq&m=105951284512898&w=2 · Note