CVE-2003-0056

Published: Feb 19, 2003Modified: Apr 16, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

Buffer overflow in secure locate (slocate) before 2.7 allows local users to execute arbitrary code via a long (1) -c or (2) -r command line argument.

Affected (2)

Products: Slocate: Slocate

Slocate

1 product

Slocate

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Slocate Slocate	Version 2.5
Slocate Slocate	Version 2.6

References (36)

ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-009.0.txt (unsafe URL)

Source: cve@mitre.org

ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc (unsafe URL)

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=104342864418213&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=104348607205691&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=104428624705363&w=2

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2004-041.html

Source: cve@mitre.org

http://secunia.com/advisories/10720

Source: cve@mitre.org

http://secunia.com/advisories/7947

Source: cve@mitre.org

http://secunia.com/advisories/7982

Source: cve@mitre.org

http://secunia.com/advisories/8007

Source: cve@mitre.org

http://secunia.com/advisories/8118/

Source: cve@mitre.org

http://secunia.com/advisories/8236

Source: cve@mitre.org

http://secunia.com/advisories/8749

Source: cve@mitre.org

http://www.debian.org/security/2003/dsa-252

Source: cve@mitre.org

PatchVendor Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2003:015

Source: cve@mitre.org

http://www.net-security.org/advisory.php?id=2010

Source: cve@mitre.org

http://www.usg.org.uk/advisories/2003.001.txt

Source: cve@mitre.org

Vendor Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11369

Source: cve@mitre.org

ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-009.0.txt (unsafe URL)