CVE-2006-4250

CVE-2006-4250, security advisory, suse linux, suse, security, cve

CVE-2006-4250

Common Vulnerabilities and Exposures

[Previous] [Index] [Next]

Upstream information

CVE-2006-4250 at MITRE

Description

Buffer overflow in man and mandb (man-db) 2.4.3 and earlier allows local users to execute arbitrary code via crafted arguments to the -H flag.

---

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having moderate severity.

CVSS v2 Scores

	National Vulnerability Database
Base Score	4.6
Vector	AV:L/AC:L/Au:N/C:P/I:P/A:P
Access Vector	Local
Access Complexity	Low
Authentication	None
Confidentiality Impact	Partial
Integrity Impact	Partial
Availability Impact	Partial

SUSE Bugzilla entry: 262747 [RESOLVED / FIXED]

SUSE Security Advisories:

• SUSE-SR:2007:007, published Fri, 20 Apr 2007 17:00:00 +0000

List of released packages

Product(s)	Fixed package version(s)	References
SUSE Linux Enterprise Micro 6.0	man >= 2.11.2-1.8	Patchnames: SUSE Linux Enterprise Micro 6.0 GA man-2.11.2-1.8
SUSE Linux Enterprise Server 11 SP1	man >= 2.5.2-17.16	Patchnames: SUSE Linux Enterprise Server 11 SP1 GA man-2.5.2-17.16
SUSE Linux Enterprise Server 11 SP2	man >= 2.5.2-17.16	Patchnames: SUSE Linux Enterprise Server 11 SP2 GA man-2.5.2-17.16
SUSE Linux Enterprise Server 11 SP3	man >= 2.5.2-17.16	Patchnames: SUSE Linux Enterprise Server 11 SP3 GA man-2.5.2-17.16
SUSE Linux Enterprise Server 11 SP4	man >= 2.5.2-17.16	Patchnames: SUSE Linux Enterprise Server 11 SP4 GA man-2.5.2-17.16
openSUSE Tumbleweed	man >= 2.9.4-2.2	Patchnames: openSUSE-Tumbleweed-2024-11036

---

SUSE Timeline for this CVE

CVE page created: Fri Jun 28 05:09:39 2013
CVE page last modified: Tue Sep 3 18:11:24 2024