Vulnerability Description
GNU locate in findutils 4.1 on Slackware 7.1 and 8.0 allows local users to gain privileges via an old formatted filename database (locatedb) that contains an entry with an out-of-range offset, which causes locate to write to arbitrary process memory.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Gnu | Findutils | 4.0 |
| Slackware | Slackware Linux | 7.1 |
References
- http://www.osvdb.org/5477
- http://www.securityfocus.com/archive/1/200991
- http://www.securityfocus.com/bid/3127ExploitVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6932
- http://www.osvdb.org/5477
- http://www.securityfocus.com/archive/1/200991
- http://www.securityfocus.com/bid/3127ExploitVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6932
FAQ
What is CVE-2001-1036?
CVE-2001-1036 is a vulnerability with a CVSS score of 7.2 (HIGH). GNU locate in findutils 4.1 on Slackware 7.1 and 8.0 allows local users to gain privileges via an old formatted filename database (locatedb) that contains an entry with an out-of-range offset, which c...
How severe is CVE-2001-1036?
CVE-2001-1036 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2001-1036?
Check the references section above for vendor advisories and patch information. Affected products include: Gnu Findutils, Slackware Slackware Linux.