slocate vulnerability

ID USN-425-1
Type ubuntu
Reporter Ubuntu
Modified 2007-02-22T00:00:00


A flaw was discovered in the permission checking code of slocate. When reporting matching files, locate would not correctly respect the parent directory’s “read” bits. This could result in filenames being displayed when the file owner had expected them to remain hidden from other system users.