RHEL 2.1 / 3 : slocate (RHSA-2004:041)

Updated slocate packages are now available that fix vulnerabilities allowing a local user to gain 'slocate' group privileges. Slocate is a security-enhanced version of locate, designed to find files on a system via a central database. Patrik Hornik discovered a vulnerability in Slocate versions u...

CVE-2003-0848

...

CVE-2003-0848

Heap-based buffer overflow in main.c of slocate 2.6, and possibly other versions, may allow local users to gain privileges via a modified slocate database that causes a negative "pathlen" value to be used...

CVE-2003-0848

CVE-2003-0848 is a heap-based buffer overflow in slocate (up to 2.7) triggered by processing a crafted slocate database, allowing a local user to gain privileges to the slocate group and access the central database. The root cause is unsafe handling of the database path and length, leading to a n...