CVE-2001-1036: Undefined Security Weakness

GNU locate in findutils 4.1 on Slackware 7.1 and 8.0 allows local users to gain privileges via an old formatted filename database locatedb that contains an entry with an out-of-range offset, which causes locate to write to arbitrary process memory...

CVE-2003-0056

Buffer overflow in secure locate slocate before 2.7 allows local users to execute arbitrary code via a long 1 -c or 2 -r command line argument...

CVE-2003-0056

CVE-2003-0056 concerns slocate, a secure locate replacement. A buffer overflow in the setuid/write path of slocate can be triggered by long -c or -r arguments, enabling a local user to execute arbitrary code. Vulnerable in slocate up to version 2.7; the issue is mitigated by upgrading to 2.7 with...

CVE-2003-0056

Buffer overflow in secure locate slocate before 2.7 allows local users to execute arbitrary code via a long 1 -c or 2 -r command line argument...

MS03-001: Unchecked buffer in Locate Service (810833)

The Microsoft Locate service is a name server that maps logical names to network-specific names. There is a security vulnerability in this server that allows an attacker to execute arbitrary code in it by sending a specially crafted packet to it. C Tenable Network Security, Inc...

CVE-2001-1036

GNU locate in findutils 4.1 on Slackware 7.1 and 8.0 allows local users to gain privileges via an old formatted filename database locatedb that contains an entry with an out-of-range offset, which causes locate to write to arbitrary process memory...

GNU findutils 4.0/4.1 - Locate Arbitrary Command Execution

// source: https://www.securityfocus.com/bid/3127/info GNU locate is an application that searches file databases for file names that match user-supplied patterns. A boundary condition error can occur when the program reads database files composed in an "old" format, produced by GNU locate prior t...

GNU findutils 4.04.1 - Locate Arbitrary Command Execution

GNU findutils 4.04.1 - Locate Arbitrary Command Execution // source: https://www.securityfocus.com/bid/3127/info GNU locate is an application that searches file databases for file names that match user-supplied patterns. A boundary condition error can occur when the program reads database files...

CVE-2001-0066

CVE-2001-0066 affects slocate (Secure Locate). A malformed database file can specify an offset that causes out-of-bounds memory access, resulting in memory corruption. In Mandrake advisories this could be exploited to run arbitrary code by supplying a crafted database. These details come from the...

CVE-2001-0066

Secure Locate slocate allows local users to corrupt memory via a malformed database file that specifies an offset value that accesses memory outside of the intended buffer...

CVE-2001-0066: Undefined Security Weakness

Secure Locate slocate allows local users to corrupt memory via a malformed database file that specifies an offset value that accesses memory outside of the intended buffer...

CVE-2001-0066

Secure Locate slocate allows local users to corrupt memory via a malformed database file that specifies an offset value that accesses memory outside of the intended buffer...

dislocate - Local i386 exploit in v1.3

Exploit for linux platform in category local exploits ====================================== dislocate - Local i386 exploit in v1.3 ====================================== / MasterSecuritY dislocate.c - Local i386 exploit in v1.3 Updated versions of this exploit and the corresponding advisory will...

dislocate 1.3 - Local i386

dislocate 1.3 - Local i386 / MasterSecuritY dislocate.c - Local i386 exploit in v1.3 Updated versions of this exploit and the corresponding advisory will be made available at: ftp://maxx.via.ecp.fr/dislocate/ This program is free software; you can redistribute it and/or modify it under the terms ...

dislocate 1.3 - Local i386

/ MasterSecuritY dislocate.c - Local i386 exploit in v1.3 Updated versions of this exploit and the corresponding advisory will be made available at: ftp://maxx.via.ecp.fr/dislocate/ This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public...

Re: [MSY] S(ecure)Locate heap corruption vulnerability

On Sun, Nov 26, 2000 at 11:38:25PM +0100, Michel Kaempf wrote: The author, Kevin Lindsay, was contacted and confirmed Secure Locate v2.3 is not affected by the vulnerability described in this advisory. Every Secure Locate version, from 1.4 included to 2.2 included, is affected by the problem, and...

[MSY] S(ecure)Locate heap corruption vulnerability

--------------- MasterSecuritY www.mastersecurity.fr --------------- ------------ SecureLocate heap corruption vulnerability ------------ ---------- By Michel "MaXX" Kaempf [email protected] ---------- -- 0x00 - Table of contents ------------------------------------------ 0x01 - Overview 0x0...

CVE-2000-0602

CVE-2000-0602 affects Secure Locate (slocate) in Red Hat Linux. Local users can gain privileges through a malformed configuration file referenced by the LOCATE_PATH environment variable, due to improper handling of the config file. The CVSS base score is 4.6 (Medium) with local attack vector and ...

CVE-2000-0602

Secure Locate slocate in Red Hat Linux allows local users to gain privileges via a malformed configuration file that is specified in the LOCATEPATH environmental variable...

CVE-2000-0602: Undefined Security Weakness

Secure Locate slocate in Red Hat Linux allows local users to gain privileges via a malformed configuration file that is specified in the LOCATEPATH environmental variable...