mandb in the man-db package before 2.3.16-3 allows local users to overwrite arbitrary files via the command line options (1) -u or (2) -c, which do not drop privileges and follow symlinks.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2002-05-03T04:00:00

Updated: 2024-08-08T04:51:08.401Z

Reserved: 2002-05-01T00:00:00

Link: CVE-2001-1331

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2001-05-03T04:00:00.000

Modified: 2008-09-10T19:10:16.383

Link: CVE-2001-1331

cve-icon Redhat

No data.