PatchTheCVEman vulnerabilities and fixes
Recent CVEs affecting man, with upgrade or downgrade steps. 3 tracked.
man has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2003-08-27. Highest priority: CVE-2003-0124 (score 40/100).
- CVE-2003-0645 MEDIUM 4.6 DOWNGRADE man-db 2.3.12 and 2.3.18 to 2.4.1 uses certain user-controlled DEFINE directives from the ~/.manpath file, eve
- CVE-2003-0620 MEDIUM 4.6 DOWNGRADE Multiple buffer overflows in man-db 2.4.1 and earlier, when installed setuid, allow local users to gain privil
- CVE-2003-0124 MEDIUM 4.6 DOWNGRADE man before 1.5l allows attackers to execute arbitrary code via a malformed man file with improper quotes, whic
FAQ
How do I fix man vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is man being exploited right now?
None of the tracked man CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which man CVE should I patch first?
CVE-2003-0124 currently ranks highest (40/100): man before 1.5l allows attackers to execute arbitrary code via a malformed man file with improper quotes, whic.