GCVE - cpe:2.3:a:man-db_project:man-db:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:man-db_project:man-db:*:*:*:*:*:*:*:*

part: a version: * update: *

Notes

Imported from purl2cpe mapping

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-25078`	vulnerable	2026-06-08 05:11:29.324645	Details available man-db before 2.8.5 on Gentoo allows local users (with access to the man user account) to gain root privileges because /usr/bin/mandb is executed by root but not owned by root. (Also, the owner can strip the setuid and setgid bits.) Published: 2023-01-25T00:00:00.000Z Updated: 2025-04-02T13:31:55.108Z Open on db.gcve.eu Reference links https://bugs.gentoo.org/662438 https://security.gentoo.org/glsa/202310-08	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-1336`	vulnerable	2026-06-08 05:06:25.380195	Details available The daily mandb cleanup job in Man-db before 2.7.6.1-1 as packaged in Ubuntu and Debian allows local users with access to the man account to gain privileges via vectors involving insecure chown use. Published: 2017-09-27T15:00:00.000Z Updated: 2024-08-06T04:40:18.328Z Open on db.gcve.eu Reference links https://bugs.launchpad.net/ubuntu/+source/man-db/+bug/1482786 http://packetstormsecurity.com/files/140759/Man-db-2.6.7.1-Privilege-Escalation.html http://www.halfdog.net/Security/2015/MandbSymlinkLocalRootPrivilegeEscalation/ http://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-1336.html http://www.securityfocus.com/bid/79723	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.