CVE-2001-1036

GNU locate in findutils 4.1 on Slackware 7.1 and 8.0 allows local users to gain privileges via an old formatted filename database (locatedb) that contains an entry with an out-of-range offset, which causes locate to write to arbitrary process memory.

Score

CVSS 2.0 7.2 High

Status

Modified - cve@mitre.org

Published

2001-08-31

Last modified

2024-08-08

Affected products

• Findutils (Gnu)
• Slackware Linux (Slackware)

References

• http://www.osvdb.org/5477
• http://www.securityfocus.com/archive/1/200991
• http://www.securityfocus.com/bid/3127
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6932