CVE Feed

    Dashboard / CVE / CVE-2001-1179

    CVE-2001-1179

    xman allows local users to gain privileges by modifying the MANPATH to point to a man page whose filename contains shell metacharacters.

    Published:Jul 17, 2001
    Last Modified:Apr 16, 2026
    EPS:Mar 15, 2002
    EPSS Score:0.0006
    CVSS Score:7.2

    Affected Products

    Vendor
    Xfree86 Project
    Product
    X11r6

    Exploits

    http://www.securityfocus.com/archive/1/197498http://www.securityfocus.com/archive/1/197498

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2007-1351 (CVSS 8.5) — Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) …
    CVE-2005-0605 (CVSS 7.5) — scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value that leads to…
    CVE-2004-0687 (CVSS 7.5) — Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and…
    CVE-2004-0688 (CVSS 7.5) — Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) …
    CVE-2004-0914 (CVSS 10) — Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include (1) m…
    CVE-2004-0094 (CVSS 7.5) — Integer signedness errors in XFree86 4.1.0 allow remote attackers to cause a denial of service and possibly ex…
    CVE-2004-0093 (CVSS 7.5) — XFree86 4.1.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an …
    CVE-2004-0106 (CVSS 7.2) — Multiple unknown vulnerabilities in XFree86 4.1.0 to 4.3.0, related to improper handling of font files, a diff…
    CVE-2004-0084 (CVSS 10) — Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered f…
    CVE-2004-0083 (CVSS 10) — Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and remote a…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High