| Package | Affected versions | Patched versions |
|---|---|---|
| man | = 1.5h1= 1.5i= 1.5i2= 1.5j= 1.5k |
man before 1.5l allows attackers to execute arbitrary code via a malformed man file with improper quotes, which causes the my_xsprintf function to return a string with the value "unsafe," which is then executed as a program via a system call if it is in the search path of the user who runs man.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free