CVE-2001-1036

Summary

GNU locate in findutils 4.1 on Slackware 7.1 and 8.0 allows local users to gain privileges via an old formatted filename database (locatedb) that contains an entry with an out-of-range offset, which causes locate to write to arbitrary process memory.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/6932
• http://www.securityfocus.com/bid/3127
• http://www.securityfocus.com/archive/1/200991
• http://www.osvdb.org/5477

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/6932
• http://www.securityfocus.com/bid/3127
• http://www.securityfocus.com/archive/1/200991
• http://www.osvdb.org/5477

• ←Previous
• Next→