mandb in the man-db package before 2.3.16-3 allows local users to overwrite arbitrary files via the command line options (1) -u or (2) -c, which do not drop privileges and follow symlinks.
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2002-05-03T04:00:00

Updated: 2002-05-09T09:00:00

Reserved: 2002-05-01T00:00:00


Link: CVE-2001-1331

JSON object: View

cve-icon NVD Information

Status : Analyzed

Published: 2001-05-03T04:00:00.000

Modified: 2008-09-10T19:10:16.383


Link: CVE-2001-1331

JSON object: View

cve-icon Redhat Information

No data.