Upstream information

CVE-2006-4250 at MITRE

Description

Buffer overflow in man and mandb (man-db) 2.4.3 and earlier allows local users to execute arbitrary code via crafted arguments to the -H flag.

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having moderate severity.

CVSS v2 Scores
  National Vulnerability Database
Base Score 4.6
Vector AV:L/AC:L/Au:N/C:P/I:P/A:P
Access Vector Local
Access Complexity Low
Authentication None
Confidentiality Impact Partial
Integrity Impact Partial
Availability Impact Partial
SUSE Bugzilla entry: 262747 [RESOLVED / FIXED]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE Linux Enterprise Server 11 SP1
  • man >= 2.5.2-17.16
 Patchnames:
SUSE Linux Enterprise Server 11 SP1 GA man-2.5.2-17.16
SUSE Linux Enterprise Server 11 SP2
  • man >= 2.5.2-17.16
 Patchnames:
SUSE Linux Enterprise Server 11 SP2 GA man-2.5.2-17.16
SUSE Linux Enterprise Server 11 SP3
  • man >= 2.5.2-17.16
 Patchnames:
SUSE Linux Enterprise Server 11 SP3 GA man-2.5.2-17.16
SUSE Linux Enterprise Server 11 SP4
  • man >= 2.5.2-17.16
 Patchnames:
SUSE Linux Enterprise Server 11 SP4 GA man-2.5.2-17.16
SUSE Linux Micro 6.0
  • man >= 2.11.2-1.8
 Patchnames:
SUSE Linux Micro 6.0 GA man-2.11.2-1.8
SUSE Linux Micro 6.1
  • man >= 2.11.2-slfo.1.1_1.2
 Patchnames:
SUSE Linux Micro 6.1 GA man-2.11.2-slfo.1.1_1.2
openSUSE Tumbleweed
  • man >= 2.9.4-2.2
 Patchnames:
openSUSE-Tumbleweed-2024-11036

SUSE Timeline for this CVE

CVE page created: Fri Jun 28 05:09:39 2013
CVE page last modified: Tue Dec 17 16:12:57 2024