CVE-2015-1336 The daily mandb cleanup job in Man-db before 2.7.6.1-1 as packaged in Ubuntu and Debian allows local users with access to the man account to gain privileges via vectors involving insecure chown use.
HighCVSS 7.8
EPSS 1.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The daily mandb cleanup job in Man-db before 2.7.6.1-1 as packaged in Ubuntu and Debian allows local users with access to the man account to gain privileges via vectors involving insecure chown use.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/man-db(Debian:12) | < 2.7.6-1 | 2.7.6-1 |
| debian/man-db(Debian:13) | < 2.7.6-1 | 2.7.6-1 |
| debian/man-db(Debian:14) | < 2.7.6-1 | 2.7.6-1 |
| man-db project man-db | <= 2.7.6.1 | No fix listed |
References
- Debian Security Tracker CVE-2015-1336 vendor-advisory
- bugs.debian.org issue-tracking
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- people.canonical.com third-party-advisory
- www.halfdog.net exploit third-party-advisory
- [oss-security] 20151214 Re: User man Local Root Exploit/Linux Kernel setgid Directory Privilege Escalation/PAM Owner Check Weakness mailing-list third-party-advisory vdb-entry
- 79723 third-party-advisory vdb-entry
- bugs.debian.org issue-tracking third-party-advisory
- bugs.launchpad.net issue-tracking third-party-advisory
- GLSA-201707-12 issue-tracking third-party-advisory vdb-entry vendor-advisory