CVE-2015-1336
- State
- Published
- Severity
- Not scored
- Published
- Sep 27, 2017
- Updated
- Aug 6, 2024
- Reserved
- Jan 22, 2015
Description
The daily mandb cleanup job in Man-db before 2.7.6.1-1 as packaged in Ubuntu and Debian allows local users with access to the man account to gain privileges via vectors involving insecure chown use.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- https://bugs.launchpad.net/ubuntu/+source/man-db/+bug/1482786
- http://packetstormsecurity.com/files/140759/Man-db-2.6.7.1-Privilege-Escalation.html
- http://www.halfdog.net/Security/2015/MandbSymlinkLocalRootPrivilegeEscalation/
- http://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-1336.html
- 79723vdb-entry
- GLSA-201707-12vendor-advisory
- [oss-security] 20151214 Re: User man Local Root Exploit/Linux Kernel setgid Directory Privilege Escalation/PAM Owner Check Weaknessmailing-list
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=840357
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.