Description
Maped in LuxMan 0.41 uses the user-provided search path to find and execute the gzip program, which allows local users to modify /dev/mem and gain privileges via a modified PATH environment variable that points to a Trojan horse gzip program.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.0 | luxman | 0.41-17.1 | DSA-189 |
Advisories 1
- DSA-189 luxman - local root exploit Debian Security (DSA / DLA) · Mar 9, 2026
References
- DSA-189 vendor-advisory
- 20021106 iDEFENSE Security Advisory 11.06.02: Non-Explicit Path Vulnerability in LuxMan mailing-list
- http://www.idefense.com/advisory/11.06.02.txt
- luxman-maped-read-memory(10549) vdb-entry
- 20021106 iDEFENSE Security Advisory 11.06.02: Non-Explicit Path Vulnerability in LuxMan mailing-list
- 6113 vdb-entry