Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

man-db: buffer overflow

Package(s):

man-db

CVE #(s):

CVE-2006-4250

Created:

April 6, 2007

Updated:

April 11, 2007

Description:

A buffer overflow has been discovered in the man command that could allow an attacker to execute code as the man user by providing specially crafted arguments to the -H flag. This is likely to be an issue only on machines with the man and mandb programs installed setuid.

Alerts:

Debian

DSA-1278-1

2007-04-06

(Log in to post comments)