CVE-2005-2812: man2web allows remote attackers to execute arbitrary commands via -P arguments.

Security readout for executives and security teams

This CVE describes a remote command execution issue in man2web through -P arguments. If an exposed deployment accepts attacker-controlled input, the host running the service could be compromised. The public bundle does not identify affected versions, a patch, or confirmed exploitation. Exposure is likely limited to systems running man2web where untrusted users can reach the affected functionality. The sources do not name specific versions, distributions, package names, or default deployment paths. Treat confirmed exposed deployments as urgent because the stated impact is arbitrary command execution. Organization-wide priority depends on whether man2web is present and reachable, which the current evidence cannot determine. Mitigation focus: Inventory systems for man2web installations and public exposure.; Disable or remove exposed man2web services if not required.; Restrict access to trusted networks or authenticated users..

Prepared

Jun 29, 2026, 17:57 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.