Security Advisory
CVE-2001-1277
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
makewhatis in the man package before 1.5i2 allows an attacker in group man to overwrite arbitrary files via a man page whose name contains shell metacharacters.