NetSight
IP …
medium4.6Public exploit code

CVE-2003-0848

Heap-based buffer overflow in main.c of slocate 2.6, and possibly other versions, may allow local users to gain privileges via a modified slocate database that…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Heap-based buffer overflow in main.c of slocate 2.6, and possibly other versions, may allow local users to gain privileges via a modified slocate database that causes a negative "pathlen" value to be used.

Affected products

VendorProductAffected versions
SlocateSlocate
Versions 2.1, 2.2, 2.3, 2.4, 2.5, 2.6

References