Lucene search

[email protected]CVE-2001-0066

HistoryFeb 16, 2001 - 5:00 a.m.

CVE-2001-0066

2001-02-1605:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2001-0066

secure locate

slocate

local user

memory corruption

nvd

6.4 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

0.4%

JSON

Secure Locate (slocate) allows local users to corrupt memory via a malformed database file that specifies an offset value that accesses memory outside of the intended buffer.

CPENameOperatorVersion
kevin_lindsay:secure_locatekevin lindsay secure locateeq2.0
kevin_lindsay:secure_locatekevin lindsay secure locateeq1.4
kevin_lindsay:secure_locatekevin lindsay secure locateeq2.1
kevin_lindsay:secure_locatekevin lindsay secure locateeq2.2
kevin_lindsay:secure_locatekevin lindsay secure locateeq1.6
kevin_lindsay:secure_locatekevin lindsay secure locateeq1.5

CPE	Name	Operator	Version
kevin_lindsay:secure_locate	kevin lindsay secure locate	eq	2.0
kevin_lindsay:secure_locate	kevin lindsay secure locate	eq	1.4
kevin_lindsay:secure_locate	kevin lindsay secure locate	eq	2.1
kevin_lindsay:secure_locate	kevin lindsay secure locate	eq	2.2
kevin_lindsay:secure_locate	kevin lindsay secure locate	eq	1.6
kevin_lindsay:secure_locate	kevin lindsay secure locate	eq	1.5

References

archives.neohapsis.com/archives/bugtraq/2000-11/0356.html

distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000369

www.debian.org/security/2000/20001217a

www.linux-mandrake.com/en/security/2000/MDKSA-2000-085.php3

www.redhat.com/support/errata/RHSA-2000-128.html

www.securityfocus.com/bid/2004

www.turbolinux.com/pipermail/tl-security-announce/2001-February/000144.html

exchange.xforce.ibmcloud.com/vulnerabilities/5594

6.4 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

0.4%

JSON

Related for CVE-2001-0066

nessus1