CVE-2001-1036 | BDVDB-2026-5029 Detail

Description#

GNU locate in findutils 4.1 on Slackware 7.1 and 8.0 allows local users to gain privileges via an old formatted filename database (locatedb) that contains an entry with an out-of-range offset, which causes locate to write to arbitrary process memory.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/6932
http://www.securityfocus.com/bid/3127
http://www.securityfocus.com/archive/1/200991
http://www.osvdb.org/5477

Exploit#

No public exploit known

History#

Version 12003-04-02Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.