high7.2Public exploit code
CVE-2001-1036
GNU locate in findutils 4.1 on Slackware 7.1 and 8.0 allows local users to gain privileges via an old formatted filename database (locatedb) that contains an e…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- GNU findutils 4.0/4.1 - Locate Arbitrary Command Execution2001-08-01 · local · linux · Verified
Impact
GNU locate in findutils 4.1 on Slackware 7.1 and 8.0 allows local users to gain privileges via an old formatted filename database (locatedb) that contains an entry with an out-of-range offset, which causes locate to write to arbitrary process memory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gnu | Findutils | Versions 4.0, 4.1 |
| Slackware | Slackware Linux | Versions 7.1, 8.0 |
References
- NVD record
- CVE.org record
- http://www.osvdb.org/5477
- http://www.securityfocus.com/archive/1/200991
- http://www.securityfocus.com/bid/3127
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6932
- http://www.osvdb.org/5477
- http://www.securityfocus.com/archive/1/200991
- http://www.securityfocus.com/bid/3127
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6932