Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2015-1336

Опубликовано: 13 дек. 2015
Источник: redhat
CVSS2: 4.4
EPSS Низкий

Описание

The daily mandb cleanup job in Man-db before 2.7.6.1-1 as packaged in Ubuntu and Debian allows local users with access to the man account to gain privileges via vectors involving insecure chown use.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 7man-dbNot affected

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-367
https://bugzilla.redhat.com/show_bug.cgi?id=1292432man-db: TOCTOU bug when processing catman pages

EPSS

Процентиль: 61%
0.01047
Низкий

4.4 Medium

CVSS2

Связанные уязвимости

CVSS3: 7.8
ubuntu
почти 9 лет назад

The daily mandb cleanup job in Man-db before 2.7.6.1-1 as packaged in Ubuntu and Debian allows local users with access to the man account to gain privileges via vectors involving insecure chown use.

CVSS3: 7.8
nvd
почти 9 лет назад

The daily mandb cleanup job in Man-db before 2.7.6.1-1 as packaged in Ubuntu and Debian allows local users with access to the man account to gain privileges via vectors involving insecure chown use.

CVSS3: 7.8
debian
почти 9 лет назад

The daily mandb cleanup job in Man-db before 2.7.6.1-1 as packaged in ...

CVSS3: 7.8
github
около 4 лет назад

The daily mandb cleanup job in Man-db before 2.7.6.1-1 as packaged in Ubuntu and Debian allows local users with access to the man account to gain privileges via vectors involving insecure chown use.

EPSS

Процентиль: 61%
0.01047
Низкий

4.4 Medium

CVSS2