Description (CNA)
GNU locate in findutils 4.1 on Slackware 7.1 and 8.0 allows local users to gain privileges via an old formatted filename database (locatedb) that contains an entry with an out-of-range offset, which causes locate to write to arbitrary process memory.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6932
- http://www.securityfocus.com/bid/3127
- http://www.securityfocus.com/archive/1/200991
- http://www.osvdb.org/5477
ADP enrichment
No English description supplied.