Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).
CVE-2000-0170 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Redhat Linux
6 documents4 sources
Severity
7.2HIGHNVD
EPSS
0.2%
top 52.61%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
Timeline
PublishedFeb 26
Latest updateApr 30
Description
Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variable.
CVSS vector
AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0
Affected Packages2 packages
🔴Vulnerability Details
2GHSA▶
GHSA-cwv2-rx46-m2v6: Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variable↗2022-04-30
CVEList▶
CVE-2000-0170: Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variable↗2000-04-10