Exploit Linux Man Page 6.1/6.2/7.0/7.1- Source Buffer Overflow

[Exploiter]

EDB-ID

20926

Проверка EDB

1. Пройдено

Автор

ZEN-PARSE

Тип уязвимости

LOCAL

Платформа

LINUX

CVE

null

Дата публикации

2001-06-12

source: https://www.securityfocus.com/bid/2872/info

A buffer overflow vulnerability exists in the implementation of the 'man' system manual pager program commonly included with Linux distributions.

The vulnerability exists due to the way the program handles manual page files beginning with a '.so' statement. Under certain circumstances, the code responsible for processing this data may be allow the length of the filename from a '.so' statement to be expanded, eventually causing a boundary condition error.

As a result, it may be possible for local users to execute arbitrary code with group 'man' privileges. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/20926.tar.gz