Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2015-1336

Опубликовано: 13 дек. 2015
Источник: redhat
CVSS2: 4.4
EPSS Низкий

Описание

The daily mandb cleanup job in Man-db before 2.7.6.1-1 as packaged in Ubuntu and Debian allows local users with access to the man account to gain privileges via vectors involving insecure chown use.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 7man-dbNot affected

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-367
https://bugzilla.redhat.com/show_bug.cgi?id=1292432man-db: TOCTOU bug when processing catman pages

EPSS

Процентиль: 58%
0.00361
Низкий

4.4 Medium

CVSS2

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 8 лет назад

The daily mandb cleanup job in Man-db before 2.7.6.1-1 as packaged in Ubuntu and Debian allows local users with access to the man account to gain privileges via vectors involving insecure chown use.

CVSS3: 7.8
nvd
больше 8 лет назад

The daily mandb cleanup job in Man-db before 2.7.6.1-1 as packaged in Ubuntu and Debian allows local users with access to the man account to gain privileges via vectors involving insecure chown use.

CVSS3: 7.8
debian
больше 8 лет назад

The daily mandb cleanup job in Man-db before 2.7.6.1-1 as packaged in ...

CVSS3: 7.8
github
больше 3 лет назад

The daily mandb cleanup job in Man-db before 2.7.6.1-1 as packaged in Ubuntu and Debian allows local users with access to the man account to gain privileges via vectors involving insecure chown use.

EPSS

Процентиль: 58%
0.00361
Низкий

4.4 Medium

CVSS2