CVE-1999-1565: Medium severity Earl Hood Man2html vulnerability
Man2html 2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Man2htmlfrom your environment.Uninstall or remove Man2html version 2.1 and earlier from affected systems if the component is not required.
- Compensating control
Prevent untrusted local users from exploiting the temporary-file symlink vulnerability by restricting write access to the temporary-file directory used by man2html and by restricting who may execute the man2html binary (e.g., tighten permissions or run only as trusted accounts).
- Operational
Inventory systems for installations of Man2html version 2.1 and earlier, and remove, isolate, or apply mitigations to those installations; audit logs for signs of symlink exploitation against temporary files.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1565?
CVE-1999-1565 is classified as a moderate severity vulnerability.
How do I fix CVE-1999-1565?
To fix CVE-1999-1565, upgrade Man2html to version 2.2 or later.
What systems are affected by CVE-1999-1565?
CVE-1999-1565 affects Man2html versions up to and including 2.1 on various systems, including Debian 4.0.
What type of attack does CVE-1999-1565 enable?
CVE-1999-1565 enables local users to perform a symlink attack to overwrite arbitrary files.
Who is the author of the software affected by CVE-1999-1565?
The affected software Man2html is authored by Earl Hood.