Fedora Core 1 : slocate-2.7-4 (2004-059)

Patrik Hornik discovered a vulnerability in Slocate versions up to and including 2.7 where a carefully crafted database could overflow a heap-based buffer. A local user could exploit this vulnerability to gain 'slocate' group privileges and then read the entire slocate database. The Common...

RHEL 2.1 / 3 : slocate (RHSA-2004:041)

Updated slocate packages are now available that fix vulnerabilities allowing a local user to gain 'slocate' group privileges. Slocate is a security-enhanced version of locate, designed to find files on a system via a central database. Patrik Hornik discovered a vulnerability in Slocate versions u...

Moderate: Red Hat Security Advisory: slocate security update

Updated slocate packages are now available that fix vulnerabilities allowing a local user to gain "slocate" group privileges. Slocate is a security-enhanced version of locate, designed to find files on a system via a central database. Patrik Hornik discovered a vulnerability in Slocate versions u...

security flaw

Heap-based buffer overflow in main.c of slocate 2.6, and possibly other versions, may allow local users to gain privileges via a modified slocate database that causes a negative "pathlen" value to be used...

security flaw

Buffer overflow in secure locate slocate before 2.7 allows local users to execute arbitrary code via a long 1 -c or 2 -r command line argument...

Moderate: Red Hat Security Advisory: : Updated slocate packages fix vulnerability

Updated slocate packages are now available that fix a heap overflow vulnerability. Slocate is a security-enhanced version of locate, designed to find files on a system via a central database. Patrik Hornik discovered a vulnerability in Slocate versions up to and including 2.7 where a carefully...

[SECURITY] [DSA 428-1] New slocate packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 428-1 [email protected] http://www.debian.org/security/ Matt Zimmerman January 20th, 2004 http://www.debian.org/security/faq -...

DSA-428 slocate - buffer overflow

Bulletin has no description...

CVE-2003-0848

Heap-based buffer overflow in main.c of slocate 2.6, and possibly other versions, may allow local users to gain privileges via a modified slocate database that causes a negative "pathlen" value to be used...

SA-20031006.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ====================================================================== Security advisory 20031006 - Appendix A proof of concept - ---------------------------------------------------------------------- Product: slocate Vulnerability type: buffer overfl...

Buffer overflow in slocate

Buffer overflow on simulational -c and -r usage...

SA-20031006 slocate buffer overflow - exploitation proof

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ====================================================================== Security advisory 20031006 - Appendix A proof of concept - ---------------------------------------------------------------------- Product: slocate Vulnerability type: buffer overfl...

CVE-2003-0848

CVE-2003-0848 is a heap-based buffer overflow in slocate (up to 2.7) triggered by processing a crafted slocate database, allowing a local user to gain privileges to the slocate group and access the central database. The root cause is unsafe handling of the database path and length, leading to a n...

SA-20031006 slocate vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ====================================================================== Security advisory 20031006 - ---------------------------------------------------------------------- Product: slocate Vulnerability type: buffer overflow corrupt heap Extended type:...

SLocate 2.6 - User-Supplied Database Heap Overflow

SLocate 2.6 - User-Supplied Database Heap Overflow // source: https://www.securityfocus.com/bid/8780/info It has been reported that a local off-by-one heap overflow exists in the handling of user-supplied databases by slocate. Because of this, an attacker may be able to gain elevated privileges...

SLocate 2.6 - User-Supplied Database Heap Overflow

// source: https://www.securityfocus.com/bid/8780/info It has been reported that a local off-by-one heap overflow exists in the handling of user-supplied databases by slocate. Because of this, an attacker may be able to gain elevated privileges. include define CODEDPATH 0x080520 define DATABASE...

CVE-2003-0326

Integer overflow in parsedecodepath of slocate may allow attackers to execute arbitrary code via a LOCATEPATH with a large number of ":" colon characters, whose count is used in a call to malloc...

CVE-2003-0326

CVE-2003-0326: Integer overflow in parse_decode_path() in slocate can allow arbitrary code execution when LOCATE_PATH contains a very large number of ":" characters, which is used in a malloc call. The existing sources describe the vulnerability and impact (local access with partial confidentiali...

CVE-2003-0326

Integer overflow in parsedecodepath of slocate may allow attackers to execute arbitrary code via a LOCATEPATH with a large number of ":" colon characters, whose count is used in a call to malloc...

[SECURITY] [DSA 252-1] New slocate packages fix local root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 252-1 [email protected] http://www.debian.org/security/ Martin Schulze February 21st, 2003 http://www.debian.org/security/faq -...