RHEL 3 : slocate (RHSA-2005:345)

An updated slocate package that fixes a denial of service and various bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Slocate is a security-enhanced version of locate. Like locate, slocate searches through a central database...

Mandrake Linux Security Advisory : slocate (MDKSA-2005:147)

A bug was discovered in the way that slocate processes very long paths. A local user could create a carefully crafted directory structure that would prevent updatedb from completing its filesystem scan, resulting in an incomplete database. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

slocate security update

CentOS Errata and Security Advisory CESA-2005:345 An updated slocate package that fixes a denial of service and various bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Slocate is a security-enhanced version of locate. Like...

Low: Red Hat Security Advisory: slocate security update

An updated slocate package that fixes a denial of service and various bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Slocate is a security-enhanced version of locate. Like locate, slocate searches through a central database...

security flaw

slocate before 2.7 does not properly process very long paths, which allows local users to cause a denial of service updatedb exit and incomplete slocate database via a certain crafted directory structure...

CVE-2005-2499

slocate before 2.7 does not properly process very long paths, which allows local users to cause a denial of service updatedb exit and incomplete slocate database via a certain crafted directory structure...

CVE-2005-2499

slocate before 2.7 does not properly process very long paths, which allows local users to cause a denial of service updatedb exit and incomplete slocate database via a certain crafted directory structure...

slocate file search utility DoS

updatedb fails to handle long directory paths...

RHEL 2.1 : slocate (RHSA-2005:747)

An updated slocate package that fixes a denial of service issue is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Slocate is a security-enhanced version of locate. Like locate, slocate searches through a nightly-updated central...

[Full-disclosure] MDKSA-2005:147 - Updated slocate packages fix vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Update Advisory Package name: slocate Advisory ID: MDKSA-2005:147 Date: August 22nd, 2005 Affected versions: 10.0, 10.1, 10.2, Corporate 3.0, Corporate Server 2.1 Problem Description: A bug was discovered in the way that slocat...

Fedora Core 3 : slocate-2.7-12.fc3.1 (2005-771)

A carefully prepared directory structure could stop the updatedb file system scan, resulting in an incomplete slocate database. The Common Vulnerabilities and Exposures project has assigned the name CVE-2005-2499 to this issue. Note that Tenable Network Security has extracted the preceding...

Fedora Core 4 : slocate-2.7-22.fc4.1 (2005-770)

A carefully prepared directory structure could stop the updatedb file system scan, resulting in an incomplete slocate database. The Common Vulnerabilities and Exposures project has assigned the name CVE-2005-2499 to this issue. Note that Tenable Network Security has extracted the preceding...

slocate security update

CentOS Errata and Security Advisory CESA-2005:747-02 An updated slocate package that fixes a denial of service issue is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Slocate is a security-enhanced version of locate. Like locate,...

Low: Red Hat Security Advisory: slocate security update

An updated slocate package that fixes a denial of service issue is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Slocate is a security-enhanced version of locate. Like locate, slocate searches through a nightly-updated central...

CVE-2005-2499

slocate before 2.7 does not properly process very long paths, which allows local users to cause a denial of service updatedb exit and incomplete slocate database via a certain crafted directory structure...

CVE-2005-2499

CVE-2005-2499 affects the slocate package (before version 2.7). A bug in how slocate scans the local filesystem could cause updatedb to fail silently with a crafted directory structure, yielding an incomplete slocate database and enabling a denial of service. The issue was addressed by Red Hat/Ce...

Debian DSA-428-1 : slocate - buffer overflow

A vulnerability was discovered in slocate, a program to index and search for files, whereby a specially crafted database could overflow a heap-based buffer. This vulnerability could be exploited by a local attacker to gain the privileges of the 'slocate' group, which can access the global databas...

Debian DSA-252-1 : slocate - buffer overflow

A problem has been discovered in slocate, a secure locate replacement. A buffer overflow in the setgid program slocate can be used to execute arbitrary code as group slocate. This can be used to alter the slocate database. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

Mandrake Linux Security Advisory : slocate (MDKSA-2003:015)

A buffer overflow vulnerability was discovered in slocate by team USG. The overflow appears when slocate is used with the -c and -r parameters, using a 1024 or 10240 byte string. This has been corrected in slocate version 2.7. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

Mandrake Linux Security Advisory : slocate (MDKSA-2004:004)

A vulnerability was discovered by Patrik Hornik in slocate versions up to and including 2.7 where a carefully crafted database could overflow a heap-based buffer. This could be exploited by a local user to gain privileges of the 'slocate' group. The updated packages contain a patch from Kevin...