• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Multiple Vendor man(1) 'makewhatis' Insecure /tmp Files Vulnerability

Bugtraq ID:	1434
Class:	Origin Validation Error
CVE:
Remote:	No
Local:	Yes
Published:	Jul 03 2000 12:00AM
Updated:	Jul 03 2000 12:00AM
Credit:	This problem was detailed in (the attached) RedHat advisory RHSA-2000:041-02 and posted to the Bugtraq mailing list on Mon, 3 Jul 2000.
Vulnerable:	RedHat man-1.5h1-1.i386.rpm + RedHat Linux 6.2 RedHat man-1.5f-1.i386.rpm RedHat Linux 6.2 sparc RedHat Linux 6.2 i386 RedHat Linux 6.2 alpha RedHat Linux 6.1 sparc RedHat Linux 6.1 i386 RedHat Linux 6.1 alpha RedHat Linux 6.0 sparc RedHat Linux 6.0 alpha RedHat Linux 6.0 RedHat Linux 5.2 sparc RedHat Linux 5.2 i386 RedHat Linux 5.2 alpha MandrakeSoft Linux Mandrake 7.1 MandrakeSoft Linux Mandrake 7.0 MandrakeSoft Linux Mandrake 6.1 MandrakeSoft Linux Mandrake 6.0 Caldera OpenLinux 2.4 Caldera OpenLinux 2.3
Not Vulnerable:	S.u.S.E. Linux 7.0 S.u.S.E. Linux 6.4 S.u.S.E. Linux 6.3 S.u.S.E. Linux 6.2 S.u.S.E. Linux 6.1 S.u.S.E. Linux 6.0