CVE-2001-1277: Wolfram Schneider Makewhatis

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

makewhatis in the man package before 1.5i2 allows an attacker in group man to overwrite arbitrary files via a man page whose name contains shell metacharacters.

Affected products

• Wolfram Schneider Makewhatis: up to and including 1.5i2

Published 2001-06-11. Last modified 2026-06-16.