CVE-2007-2452

The CVE-2007-2452 issue affects GNU findutils’ locate utility prior to version 4.2.31, where a heap-based buffer overflow in visit_old_format ( locate/locate.c ) allows a context-dependent attacker to execute arbitrary code via a long pathname in an old-format locate database. The vulnerability i...

CVE-2001-1036

The connected records show a concrete vulnerability in GNU findutils locate prior to version 4.2.31. The flaw is a heap-based buffer overflow in the visit_old_format function (locate/locate.c) that can be triggered by a long pathname stored in a locate database using the old format, potentially a...