CVE-2015-1336
Published: 28 September 2017
The daily mandb cleanup job in Man-db before 2.7.6.1-1 as packaged in Ubuntu and Debian allows local users with access to the man account to gain privileges via vectors involving insecure chown use.
Priority
Low
CVSS 3 base score: 7.8
Status
| Package | Release | Status |
|---|---|---|
|
man-db Launchpad, Ubuntu, Debian |
Upstream |
Released
(2.7.6.1-1)
|
| Ubuntu 21.10 (Impish Indri) |
Not vulnerable
(2.7.6.1-1)
|
|
| Ubuntu 21.04 (Hirsute Hippo) |
Not vulnerable
(2.7.6.1-1)
|
|
| Ubuntu 20.04 LTS (Focal Fossa) |
Not vulnerable
(2.7.6.1-1)
|
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Not vulnerable
(2.7.6.1-1)
|
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Needed
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Needed
|