CVE-2006-4250

published 2007-04-10

CVE-2006-4250: Buffer overflow in man and mandb (man-db) 2.4.3 and earlier allows local users to execute arbitrary code via crafted arguments to the -H flag.

Priority P4 25 medium 4.6 CVSS 2.0

AV L AC L Au N C P I P A P

EXPLOIT

Buffer overflow in man and mandb (man-db) 2.4.3 and earlier allows local users to execute arbitrary code via crafted arguments to the -H flag.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
debian	debian_linux	—	—
debian	man-db	< man-db 2.4.3-5 (bookworm)	man-db 2.4.3-5 (bookworm)
man-db_project	man-db	>= 0 < 2.4.3-5	2.4.3-5
man-db_project	man-db	>= 0 < 2.4.3-5	2.4.3-5
man-db_project	man-db	>= 0 < 2.4.3-5	2.4.3-5
man-db_project	man-db	>= 0 < 2.4.3-5	2.4.3-5

CVSS provenance

nvd v2.0 4.6 MEDIUM AV:L/AC:L/Au:N/C:P/I:P/A:P

osv 4.6 MEDIUM

vendor_debian 4.6 MEDIUM

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.