EDB-22344

functional

Man Program 1.5 - Unsafe Return Value Command Execution

view exploit source exploit_dbverifiedtype localauthor Jack Lloydpublished 2003-03-11catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2003-0124USmedium4.6Exploit
man before 1.5l allows attackers to execute arbitrary code via a malformed man file with improper quotes, which causes the my_xsprintf function to return a string with the value "u…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan