CVE-2003-0620: Buffer Overflow
Multiple buffer overflows in man-db 2.4.1 and earlier, when installed setuid, allow local users to gain privileges via (1) MANDATORYMANPATH, MANPATHMAP, and MANDBMAP arguments to addtodirlist in manp.c, (2) a long pathname to ultsrc in ultsrc.c, (3) a long .so argument to testforinclude in ultsrc.c, (4) a long MANPATH environment variable, or (5) a long PATH environment variable.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Ensure man-db is not installed setuid. Remove the setuid bit from installed man binaries (for example: chmod u-s /usr/bin/man or equivalent for your system) so the man binary is not setuid.
man-db setuid = disabled - Operational
Inventory systems for installations of man-db version 2.4.1 or earlier; for any found, immediately remove the setuid bit from the man binaries to mitigate the reported local privilege escalation vulnerabilities.
Event History
Frequently Asked Questions
What is the severity of CVE-2003-0620?
CVE-2003-0620 has a high severity rating due to its potential to allow local users to escalate privileges.
How do I fix CVE-2003-0620?
To fix CVE-2003-0620, upgrade to a patched version of man-db that addresses the identified buffer overflow vulnerabilities.
Which versions of man-db are affected by CVE-2003-0620?
CVE-2003-0620 affects man-db versions 2.4.1 and earlier, including 2.3.18 to 2.3.20.
Who is the vendor associated with CVE-2003-0620?
The vendor associated with CVE-2003-0620 is Andries Brouwer, the maintainer of the man utility.
Is CVE-2003-0620 a remote or local vulnerability?
CVE-2003-0620 is a local vulnerability that can be exploited by users with access to the system.