← CVECheck
HomeVulnerabilities

CVE-2001-1277 — LOW severity vulnerability (makewhatis in the man package before 1.5i2 allows an attacke)

makewhatis in the man package before 1.5i2 allows an attacker in group man to overwrite arbitrary files via a man page whose name contains shell metacharacters.

CVE IDCVE-2001-1277
SeverityLOW
CVSS score2.1
CVSS vectorAV:L/AC:L/Au:N/C:N/I:P/A:N
CWENVD-CWE-Other
StatusModified
Published2001-06-11
Last modified2026-04-16
Descriptionmakewhatis in the man package before 1.5i2 allows an attacker in group man to overwrite arbitrary files via a man page whose name contains shell metacharacters.
SourceNIST National Vulnerability Database

🔍 Search all vulnerabilities →