Exploitation Summary
EIP tracks 1 public exploit for CVE-2003-0645. PoCs published by vade79.
AI-analyzed exploit summary This exploit leverages a privileged execve() call in man-db (v2.4.1 and earlier) to execute arbitrary code with the privileges of the 'man' user. It manipulates the compressor configuration to execute a malicious binary, resulting in a local privilege escalation (LPE).
Description
man-db 2.3.12 and 2.3.18 to 2.4.1 uses certain user-controlled DEFINE directives from the ~/.manpath file, even when running setuid, which could allow local users to gain privileges.
Exploits (1)
This exploit leverages a privileged execve() call in man-db (v2.4.1 and earlier) to execute arbitrary code with the privileges of the 'man' user. It manipulates the compressor configuration to execute a malicious binary, resulting in a local privilege escalation (LPE).