CVE-2015-1336

CVE-2015-1336 is a local privilege escalation vulnerability affecting Man-db versions before 2.7.6.1-1 as packaged in Ubuntu and Debian. It allows a local user with access to the 'man' account to gain elevated privileges through insecure chown usage during the daily mandb cleanup job. With a CVSS score of 7.8 (High), this vulnerability has a low attack complexity and requires low privileges, enabling a complete compromise of confidentiality, integrity, and availability. While not listed on CISA's KEV catalog, an exploit (EDB-41158) is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.