Skip to content
OpenAdvisories
Unscored DSA-364 2 CVEs

man-db - buffer overflows, arbitrary command execution

Published Aug 4, 2003 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 3.0 man-db 2.3.20-18.woody.2

Vulnerabilities 2

  • Unscored —
    CVE-2003-0620 Public exploit

    Multiple buffer overflows in man-db 2.4.1 and earlier, when installed setuid, allow local users to gain privileges via …

    man-db Debian
  • Unscored —
    CVE-2003-0645 Public exploit

    man-db 2.3.12 and 2.3.18 to 2.4.1 uses certain user-controlled DEFINE directives from the ~/.manpath file, even when ru…

    man-db Debian