Description
Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variable.
Affected products
- RedHat / linux4.0 – 4.0
- RedHat / linux4.1 – 4.1
- RedHat / linux4.2 – 4.2
- RedHat / linux5.0 – 5.0
- RedHat / linux5.1 – 5.1
- RedHat / linux5.2 – 5.2
- RedHat / linux6.0 – 6.0
- RedHat / linux6.2 – 6.2
- turbolinux / turbolinux3.5b2 – 3.5b2
- turbolinux / turbolinux4.2 – 4.2
- turbolinux / turbolinux4.4 – 4.4
Exploits & proofs of concept
- exploit-dbRedHat 6.1 - 'man' Local Overflow / Local Privilege Escalationby teleh0r
- exploit-dbRedHat 4.x/5.x/6.x / RedHat man 1.5 / Turbolinux man 1.5 / Turbolinux 3.5/4.x - 'man' Buffer Overrun (2)by Babcia Padlina
- exploit-dbRedHat 4.x/5.x/6.x / RedHat man 1.5 / Turbolinux man 1.5 / Turbolinux 3.5/4.x - 'man' Buffer Overrun (1)by Babcia Padlina
References
Updated 4m ago · 8 sources