high7.2Public exploit code
CVE-2001-0066
Secure Locate (slocate) allows local users to corrupt memory via a malformed database file that specifies an offset value that accesses memory outside of the i…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- dislocate 1.3 - Local i3862000-12-02 · local · linux · Verified
Impact
Secure Locate (slocate) allows local users to corrupt memory via a malformed database file that specifies an offset value that accesses memory outside of the intended buffer.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kevin Lindsay | Secure Locate | Versions 1.4, 1.5, 1.6, 2.0, 2.1, 2.2 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-11/0356.html
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000369
- http://www.debian.org/security/2000/20001217a
- http://www.linux-mandrake.com/en/security/2000/MDKSA-2000-085.php3
- http://www.redhat.com/support/errata/RHSA-2000-128.html
- http://www.securityfocus.com/bid/2004
- http://www.turbolinux.com/pipermail/tl-security-announce/2001-February/000144.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5594
- http://archives.neohapsis.com/archives/bugtraq/2000-11/0356.html
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000369
- http://www.debian.org/security/2000/20001217a
- http://www.linux-mandrake.com/en/security/2000/MDKSA-2000-085.php3
- http://www.redhat.com/support/errata/RHSA-2000-128.html
- http://www.securityfocus.com/bid/2004
- http://www.turbolinux.com/pipermail/tl-security-announce/2001-February/000144.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5594