CVE-2003-0124 – Man Program 1.5 - Unsafe Return Value Command Execution

https://notcve.org/view.php?id=CVE-2003-0124

18 Mar 2003 — man before 1.5l allows attackers to execute arbitrary code via a malformed man file with improper quotes, which causes the my_xsprintf function to return a string with the value "unsafe," which is then executed as a program via a system call if it is in the search path of the user who runs man. man anterior a 1.51 permite a atacantes ejecutar código de su elección mediante un fichero man con comillas mal colocadas, lo que causa que la función my_xsprintf devuelva una cadena con el valor "unsafe", que es ent... • https://www.exploit-db.com/exploits/22344 •