Secunia
|
|
|
|
|
|
|
|
|
Secunia Advisory SA7947slocate buffer overflow
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Description
slocate contains a buffer overflow, by supplying 1024 characters long arguments to the -c and -r command line parameters it is possible to cause an exploitable buffer overflow. slocate is installed setgid, this allows users to gain privileges as the slocate group, this could allow users to read the slocate database which contains information about all files on the system. Solution Provided and/or discovered by Deep Links Do you have additional information related to this advisory?Please provide information about patches, mitigating factors, new versions, exploits, faulty patches, links, and other relevant data by posting comments to this Advisory. You can also send this information to vuln@secunia.com
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
