Upstream information

CVE-2006-4250 at MITRE

Description

Buffer overflow in man and mandb (man-db) 2.4.3 and earlier allows local users to execute arbitrary code via crafted arguments to the -H flag.

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having moderate severity.

CVSS v2 Scores
  National Vulnerability Database
Base Score 4.6
Vector AV:L/AC:L/Au:N/C:P/I:P/A:P
Access Vector Local
Access Complexity Low
Authentication None
Confidentiality Impact Partial
Integrity Impact Partial
Availability Impact Partial
SUSE Bugzilla entry: 262747 [RESOLVED / FIXED]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE Linux Enterprise Server 11 SP1
  • man >= 2.5.2-17.16
Patchnames:
SUSE Linux Enterprise Server 11 SP1 GA man
SUSE Linux Enterprise Server 11 SP2
  • man >= 2.5.2-17.16
Patchnames:
SUSE Linux Enterprise Server 11 SP2 GA man
SUSE Linux Enterprise Server 11 SP3
  • man >= 2.5.2-17.16
Patchnames:
SUSE Linux Enterprise Server 11 SP3 GA man
SUSE Linux Enterprise Server 11 SP4
  • man >= 2.5.2-17.16
Patchnames:
SUSE Linux Enterprise Server 11 SP4 GA man
SUSE LINUX 10.0
  • man >= 2.4.1-223.3
SUSE LINUX 10.1
  • man >= 2.4.1-237.6
SUSE LINUX 9.3
  • man >= 2.4.1-221.3
Novell Linux Desktop 9 for x86
Novell Linux Desktop 9 for x86_64
Open Enterprise Server
  • man >= 2.4.1-214.7
sles10.s390x
sled10.x86
sles9-oes.x86
core9.s390
ZYPP Patch Nr: 3101