CVE-2006-4250

Debian Linux - Buffer Overflow

Title source: rule

Description

Buffer overflow in man and mandb (man-db) 2.4.3 and earlier allows local users to execute arbitrary code via crafted arguments to the -H flag.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Daniel Roethlisberger · clocallinux

https://www.exploit-db.com/exploits/29822

View Code ZIP pw:eip

References (9)

[Third Party Advisory] http://secunia.com/advisories/24828

[Patch, Vendor Advisory] http://www.debian.org/security/2007/dsa-1278

[Third Party Advisory] http://secunia.com/advisories/24801

[Vendor Advisory] http://www.novell.com/linux/security/advisories/2007_007_suse.html

[Third Party Advisory] http://secunia.com/advisories/24995

[Exploit] http://www.securityfocus.com/bid/23355

[Third Party Advisory] http://www.vupen.com/english/advisories/2007/1295

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/33508

[Third Party Advisory] http://www.vupen.com/english/advisories/2007/1294

Scores

EPSS 0.0032

EPSS Percentile 55.5%

Details

Status published

Products (1)

debian/debian_linux 3.1 (14 CPE variants)

Published Apr 10, 2007

Tracked Since Feb 18, 2026