Debian man-db Executable Overwrite Vulnerability
BID:2720
Info
Debian man-db Executable Overwrite Vulnerability
| Bugtraq ID: | 2720 |
| Class: | Configuration Error |
| CVE: |
CVE-2001-1331 |
| Remote: | No |
| Local: | Yes |
| Published: | May 03 2001 12:00AM |
| Updated: | Jul 11 2009 06:06AM |
| Credit: | Reported to Bugtraq by Progeny Service Network in an advisory dated May 10, 2001. |
| Vulnerable: |
Progeny Debian 1.0 Debian Linux 2.2 |
| Not Vulnerable: | |
Discussion
Debian man-db Executable Overwrite Vulnerability
man-db is the Debian utility used to display on-line help files.
Affected versions of this utility improperly set write permissions in manual page directories. The settings allow the invoking 'man' user to overwrite the mandb binary itself, potentially replacing it with malicious code.
Since mandb assumes the privilege level of the user running it, the possibility of a user replacing it with a hostile binary prior to its execution by a privileged user (including root) has serious security implications for the vulnerable host.
man-db is the Debian utility used to display on-line help files.
Affected versions of this utility improperly set write permissions in manual page directories. The settings allow the invoking 'man' user to overwrite the mandb binary itself, potentially replacing it with malicious code.
Since mandb assumes the privilege level of the user running it, the possibility of a user replacing it with a hostile binary prior to its execution by a privileged user (including root) has serious security implications for the vulnerable host.
Exploit / POC
Debian man-db Executable Overwrite Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Debian man-db Executable Overwrite Vulnerability
Solution:
man-db version 2.3.17.1-4 corrects the problem.
Progeny Debian 1.0
Debian Linux 2.2
Solution:
man-db version 2.3.17.1-4 corrects the problem.
Progeny Debian 1.0
-
Progeny man-db_2.3.17.1-4_i386.deb
http://archive.progeny.com/progeny/updates/newton/man-db_2.3.17.1-4_i3 86.deb
Debian Linux 2.2
-
Debian 2.2 i386 man-db_2.3.16-3_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/man-d b_2.3.16-3_i386.deb -
Progeny man-db_2.3.17.1-4_i386.deb
http://archive.progeny.com/progeny/updates/newton/man-db_2.3.17.1-4_i3 86.deb
References
Debian man-db Executable Overwrite Vulnerability
References:
References: