CVE-2003-0620 - CVE House
Back to Database
Status published Medium CVE-2003-0620

Multiple buffer overflows in man-db 2.4.1 and earlier, when installed...

Vulnerability Description

Multiple buffer overflows in man-db 2.4.1 and earlier, when installed setuid, allow local users to gain privileges via (1) MANDATORY_MANPATH, MANPATH_MAP, and MANDB_MAP arguments to add_to_dirlist in manp.c, (2) a long pathname to ult_src in ult_src.c, (3) a long .so argument to test_for_include in ult_src.c, (4) a long MANPATH environment variable, or (5) a long PATH environment variable.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2003-0620

Credits & Attribution

No credits recorded in the NVD database.

References

More from andries brouwer

View All →
CVE-2006-7108
login in util-linux-2.12a skips pam_acct_mgmt and chauth_tok when authentication is...
Medium 4.1
CVE-2005-2876
umount in util-linux 2.8 to 2.12q, 2.13-pre1, and 2.13-pre2, and...
High 7.2
CVE-2004-0080
The login program in util-linux 2.11 and earlier uses a...
Medium 5
CVE-2003-0645
man-db 2.3.12 and 2.3.18 to 2.4.1 uses certain user-controlled DEFINE...
Medium 4.6
CVE-2003-0124
man before 1.5l allows attackers to execute arbitrary code via...
Medium 4.6

Affected Vendor

andries brouwer

View all reports →

Affected Software

man
Vulnerable Versions:
2.3.18, 2.3.19, 2.3.20, 2.4, 2.4.1

Timeline

Official Publish: August 1st, 2003
Last Modified: August 8th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.