Skip to content
OpenAdvisories
High · 7.8 CVE-2018-25078 EUVD-2018-13836GHSA-h23x-f4p5-92c3

man-db before 2.8.5 on Gentoo allows local users (with access to the man user account) to gain root privileges because /usr/bin/mandb is ex…

Published Jan 25, 2023 · Updated Apr 2, 2025 · Assigned by mitre

Description

man-db before 2.8.5 on Gentoo allows local users (with access to the man user account) to gain root privileges because /usr/bin/mandb is executed by root but not owned by root. (Also, the owner can strip the setuid and setgid bits.)

References