Filtered by vendor Slocate Subscriptions
Filtered by product Slocate Subscriptions
Total 5 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2007-0227 1 Slocate 1 Slocate 2024-11-21 N/A
slocate 3.1 does not properly manage database entries that specify names of files in protected directories, which allows local users to obtain the names of private files. NOTE: another researcher reports that the issue is not present in slocate 2.7.
CVE-2005-2499 2 Redhat, Slocate 2 Enterprise Linux, Slocate 2024-11-20 N/A
slocate before 2.7 does not properly process very long paths, which allows local users to cause a denial of service (updatedb exit and incomplete slocate database) via a certain crafted directory structure.
CVE-2003-0848 2 Redhat, Slocate 3 Enterprise Linux, Linux, Slocate 2024-11-20 N/A
Heap-based buffer overflow in main.c of slocate 2.6, and possibly other versions, may allow local users to gain privileges via a modified slocate database that causes a negative "pathlen" value to be used.
CVE-2003-0326 1 Slocate 1 Slocate 2024-11-20 N/A
Integer overflow in parse_decode_path() of slocate may allow attackers to execute arbitrary code via a LOCATE_PATH with a large number of ":" (colon) characters, whose count is used in a call to malloc.
CVE-2003-0056 2 Redhat, Slocate 2 Enterprise Linux, Slocate 2024-11-20 N/A
Buffer overflow in secure locate (slocate) before 2.7 allows local users to execute arbitrary code via a long (1) -c or (2) -r command line argument.