CVE

Id
6953  
CVE No.
CVE-2003-0124  
Status
Entry  
Description
man before 1.5l allows attackers to execute arbitrary code via a malformed man file with improper quotes, which causes the my_xsprintf function to return a string with the value "unsafe," which is then executed as a program via a system call if it is in the search path of the user who runs man.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
40198 6953 CVE-2003-0124 BUGTRAQ:20030311 Vulnerability in man < 1.5l  View
40199 6953 CVE-2003-0124 URL:http://marc.info/?l=bugtraq&m=104740927915154&w=2  View
40200 6953 CVE-2003-0124 CONECTIVA:CLSA-2003:620  View
40201 6953 CVE-2003-0124 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000620  View
40202 6953 CVE-2003-0124 GENTOO:GLSA-200303-13  View
40203 6953 CVE-2003-0124 URL:http://marc.info/?l=bugtraq&m=104802285112752&w=2  View
40204 6953 CVE-2003-0124 REDHAT:RHSA-2003:133  View
40205 6953 CVE-2003-0124 URL:http://www.redhat.com/support/errata/RHSA-2003-133.html  View
40206 6953 CVE-2003-0124 REDHAT:RHSA-2003:134  View
40207 6953 CVE-2003-0124 URL:http://www.redhat.com/support/errata/RHSA-2003-134.html  View
40208 6953 CVE-2003-0124 BID:7066  View
40209 6953 CVE-2003-0124 URL:http://www.securityfocus.com/bid/7066  View
40210 6953 CVE-2003-0124 XF:man-myxsprintf-code-execution(11512)  View

Related JVN