111 matches found
DEBIAN-CVE-2007-2452
Heap-based buffer overflow in the visitoldformat function in locate/locate.c in locate in GNU findutils before 4.2.31 might allow context-dependent attackers to execute arbitrary code via a long pathname in a locate database that has the old format, a different vulnerability than CVE-2001-1036...
CVE-2007-2452
Heap-based buffer overflow in the visitoldformat function in locate/locate.c in locate in GNU findutils before 4.2.31 might allow context-dependent attackers to execute arbitrary code via a long pathname in a locate database that has the old format, a different vulnerability than CVE-2001-1036...
GNU Locate旧格式locate数据库本地缓冲区溢出漏洞
GNU locate是可以在文件数据库里搜索那些匹配用户提供的文件名的程序。 GNU locate读取旧格式locate数据库的文件名存在缓冲区溢出，本地攻击者可以利用漏洞以应用程序权限执行任意指令。 当GNU locate读取旧格式locate数据库的文件名时会拷贝到分配在堆上的固定缓冲区中，文件名超过1026字节可导致缓冲区溢出，溢出的数据可以由用户选择来控制建立本地系统上的文件名。 GNU findutils 4.2.30 + Slackware Linux 8.0 + Slackware Linux 7.1 GNU findutils 4.2.29 + Slackware Lin...
FreeBSD : findutils -- GNU locate heap buffer overrun (7ca2a709-103b-11dc-8e82-00001cd613f9)
James Youngman reports : When GNU locate reads filenames from an old-format locate database, they are read into a fixed-length buffer allocated on the heap. Filenames longer than the 1026-byte buffer can cause a buffer overrun. The overrunning data can be chosen by any person able to control the...
GNU Findutils release 4.2.31 fixes CVE-2007-2452 (GNU locate heap buffer overrun)
$Revision: 1.4 $; $Date: 2007/05/30 22:04:52 $ I. BACKGROUND ============= GNU findutils is a set of programs which search for files on Unix-like systems. It is maintained by the GNU Project of the Free Software Foundation. For more information, see http://www.gnu.org/software/findutils. II...
GNU findutils locate buffer overflow
Heap buffer overflow on parsing old-format locate database...
findutils -- GNU locate heap buffer overrun
James Youngman reports: When GNU locate reads filenames from an old-format locate database, they are read into a fixed-length buffer allocated on the heap. Filenames longer than the 1026-byte buffer can cause a buffer overrun. The overrunning data can be chosen by any person able to control the...
dislocate - Local i386 exploit in v1.3
No description provided by source. / MasterSecuritY www.mastersecurity.fr dislocate.c - Local i386 exploit in v1.3 Secure Locate v2.3 Copyright C 2000 Michel "MaXX" Kaempf [email protected] Updated versions of this exploit and the corresponding advisory will be made available at:...
Free kill often with a few important tools-vulnerability warning-the black bar safety net
C32Asm V0. 4. 1 2 C32Asm is set reverse assemble, 1 6 hex tools, Hiew modify the features and integration PE Explorer 1.98 Powerful resource tool, can directly Browse and modify the software resources, including menus, dialog boxes, string tables, etc.; in addition, also equipped with W32DASM...
CVE-2001-1036
The connected records show a concrete vulnerability in GNU findutils locate prior to version 4.2.31. The flaw is a heap-based buffer overflow in the visit_old_format function (locate/locate.c) that can be triggered by a long pathname stored in a locate database using the old format, potentially a...
CVE-2001-1036
GNU locate in findutils 4.1 on Slackware 7.1 and 8.0 allows local users to gain privileges via an old formatted filename database locatedb that contains an entry with an out-of-range offset, which causes locate to write to arbitrary process memory...
CVE-2003-0056
Buffer overflow in secure locate slocate before 2.7 allows local users to execute arbitrary code via a long 1 -c or 2 -r command line argument...
CVE-2003-0056
CVE-2003-0056 concerns slocate, a secure locate replacement. A buffer overflow in the setuid/write path of slocate can be triggered by long -c or -r arguments, enabling a local user to execute arbitrary code. Vulnerable in slocate up to version 2.7; the issue is mitigated by upgrading to 2.7 with...
CVE-2003-0056
Buffer overflow in secure locate slocate before 2.7 allows local users to execute arbitrary code via a long 1 -c or 2 -r command line argument...
MS03-001: Unchecked buffer in Locate Service (810833)
The Microsoft Locate service is a name server that maps logical names to network-specific names. There is a security vulnerability in this server that allows an attacker to execute arbitrary code in it by sending a specially crafted packet to it. C Tenable Network Security, Inc...
CVE-2001-1036
GNU locate in findutils 4.1 on Slackware 7.1 and 8.0 allows local users to gain privileges via an old formatted filename database locatedb that contains an entry with an out-of-range offset, which causes locate to write to arbitrary process memory...
GNU findutils 4.0/4.1 - Locate Arbitrary Command Execution
// source: https://www.securityfocus.com/bid/3127/info GNU locate is an application that searches file databases for file names that match user-supplied patterns. A boundary condition error can occur when the program reads database files composed in an "old" format, produced by GNU locate prior t...
GNU findutils 4.04.1 - Locate Arbitrary Command Execution
GNU findutils 4.04.1 - Locate Arbitrary Command Execution // source: https://www.securityfocus.com/bid/3127/info GNU locate is an application that searches file databases for file names that match user-supplied patterns. A boundary condition error can occur when the program reads database files...
CVE-2001-0066
CVE-2001-0066 affects slocate (Secure Locate). A malformed database file can specify an offset that causes out-of-bounds memory access, resulting in memory corruption. In Mandrake advisories this could be exploited to run arbitrary code by supplying a crafted database. These details come from the...