{"action":"Upgrade man-db to 2.7.6-1 or later.","affected":[{"fixed":"2.7.6-1","introduced":"0"}],"component":"man-db","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["2.7.6-1"],"id":"tcs_01M5NB44J85Y1MD4JNM403NC2P","modified_at":"2026-09-09T07:00:26.045478987Z","published_at":"2017-09-28T01:29:00.420Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2015-1336","https://security-tracker.debian.org/tracker/CVE-2015-1336"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2015-1336","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2015-1336"}],"summary":"The daily mandb cleanup job in Man-db before 2.7.6.1-1 as packaged in Ubuntu and Debian allows local users with access to the man account to gain privileges via vectors involving insecure chown use."}