4.6

CVE-2003-0848

Heap-based buffer overflow in main.c of slocate 2.6, and possibly other versions, may allow local users to gain privileges via a modified slocate database that causes a negative "pathlen" value to be used.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
SlocateSlocate Version2.1
SlocateSlocate Version2.2
SlocateSlocate Version2.3
SlocateSlocate Version2.4
SlocateSlocate Version2.5
SlocateSlocate Version2.6
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.94% 0.564
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc
http://secunia.com/advisories/10720
ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Workstation/CSSA-2004-001.0/CSSA-2004-001.0.txt
ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.asc
http://marc.info/?l=bugtraq&m=106546447321274&w=2
http://marc.info/?l=bugtraq&m=106589631819348&w=2
http://rhn.redhat.com/errata/RHSA-2004-040.html
http://secunia.com/advisories/10670
http://secunia.com/advisories/10683
http://secunia.com/advisories/10686
http://secunia.com/advisories/10698
http://secunia.com/advisories/10702
http://secunia.com/advisories/10722
http://secunia.com/advisories/9962/
http://www.debian.org/security/2004/dsa-428
Patch
Vendor Advisory
http://www.ebitech.sk/patrik/SA/SA-20031006-A.txt
http://www.ebitech.sk/patrik/SA/SA-20031006.txt
http://www.mandriva.com/security/advisories?name=MDKSA-2004:004
http://www.redhat.com/archives/fedora-announce-list/2004-January/msg00009.html
http://www.redhat.com/support/errata/RHSA-2004-041.html
http://www.trustix.org/errata/misc/2004/TSL-2004-0005-slocate.asc.txt
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11033
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A821