Secure Network Operations, Inc. Advisory SRT2003-09-11-1200 – In the man-1.5x code, some checks may not be present upon compile time that keep man from not being vulnerable. RedHat 9 is one such installation that ships man setgid and vulnerable to attack if the vendor supplied binary is utilized. http://www.secnetops.com.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/31638/SRT2003-09-11-1200.txt
Source: https://packetstormsecurity.com/files/31638/SRT2003-09-11-1200.txt.html