[SECURITY] [DSA 252-1] New slocate packages fix local root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 252-1 [email protected] http://www.debian.org/security/ Martin Schulze February 21st, 2003 http://www.debian.org/security/faq -...

DSA-252 slocate - buffer overflow

Bulletin has no description...

CVE-2003-0056

CVE-2003-0056 concerns slocate, a secure locate replacement. A buffer overflow in the setuid/write path of slocate can be triggered by long -c or -r arguments, enabling a local user to execute arbitrary code. Vulnerable in slocate up to version 2.7; the issue is mitigated by upgrading to 2.7 with...

[USG- SA- 2003.001] USG Security Advisory (slocate)

-----BEGIN PGP SIGNED MESSAGE----- USG Security Advisory http://www.usg.org.uk/advisories/2003.001.txt [email protected] USG- SA- 2003.001 24- Jan- 2003 Package: slocate Vulnerability: local buffer overflow Type: local Risk: high, users can gain high privileges in the system. System tested:...

slocate 2.52.6 - Local Buffer Overrun

slocate 2.52.6 - Local Buffer Overrun source: https://www.securityfocus.com/bid/6676/info A vulnerability has been discovered in slocate. It has been reported that a buffer overrun occurs when running the slocate program with command line arguments of excessive length. Specifically, it is possibl...

slocate 2.5/2.6 - Local Buffer Overrun

source: https://www.securityfocus.com/bid/6676/info A vulnerability has been discovered in slocate. It has been reported that a buffer overrun occurs when running the slocate program with command line arguments of excessive length. Specifically, it is possible to overrun a buffer in slocate by...

Дырка в slocate

Переполнение буфера при разборе файла индекса...

Re: slocate bug.

Heres the details on Mandrake Linux elguapo@linux elguapo$ ls -al which slocate -rwxr-sr-x 2 root slocate 24956 Apr 6 2001 /usr/bin/slocate elguapo@linux elguapo$ uname -a Linux linux.ckfr.com 2.4.3-20mdk 1 Sun Apr 15 23:03:10 CEST 2001 i686 unknown elguapo@linux elguapo$ cat /etc/redhat-release...

slocate bug.

Hey, Its a good time to announce that 2xs security LTD. decided to create a research team in order to focus on finding new bugs, further more we managed to develop a security tool to discover bugs/security flaws. In the near future, the tool itself will became an open source project. slocate Secu...

CVE-2001-0066

CVE-2001-0066 affects slocate (Secure Locate). A malformed database file can specify an offset that causes out-of-bounds memory access, resulting in memory corruption. In Mandrake advisories this could be exploited to run arbitrary code by supplying a crafted database. These details come from the...

[SECURITY] [DSA-005-1] slocate local exploit

Package : slocate Problem type : local exploit Debian-specific: no Michel Kaempf reported a security problem in slocate a secure version of locate, a tool to quickly locate files on a filesystem on bugtraq which was originally discovered by zorgon. He discovered there was a bug in the database...

CVE-2000-0602

CVE-2000-0602 affects Secure Locate (slocate) in Red Hat Linux. Local users can gain privileges through a malformed configuration file referenced by the LOCATE_PATH environment variable, due to improper handling of the config file. The CVSS base score is 4.6 (Medium) with local attack vector and ...

Дырки в утилитах из RedHat

Дырки в утилитах gkermit egid==uucp; slocate gid slocate, slrn, C-Kermit gid=uucp, diskcheck и Mgetty-sendfaxперезапись любого файла, ksu sgid root, eSound, IMAP4rev1 v12.264 DoS,...