CVE-2003-0848

Published: Nov 17, 2003Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

Heap-based buffer overflow in main.c of slocate 2.6, and possibly other versions, may allow local users to gain privileges via a modified slocate database that causes a negative "pathlen" value to be used.

Affected (6)

Products: Slocate: Slocate

Slocate

1 product

Slocate

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Slocate Slocate	Version 2.1
Slocate Slocate	Version 2.2
Slocate Slocate	Version 2.3
Slocate Slocate	Version 2.4
Slocate Slocate	Version 2.5
Slocate Slocate	Version 2.6

References (46)

ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Workstation/CSSA-2004-001.0/CSSA-2004-001.0.txt (unsafe URL)

Source: cve@mitre.org

ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.asc (unsafe URL)

Source: cve@mitre.org

ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc (unsafe URL)

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=106546447321274&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=106589631819348&w=2

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2004-040.html

Source: cve@mitre.org

http://secunia.com/advisories/10670

Source: cve@mitre.org

http://secunia.com/advisories/10683

Source: cve@mitre.org

http://secunia.com/advisories/10686

Source: cve@mitre.org

http://secunia.com/advisories/10698

Source: cve@mitre.org

http://secunia.com/advisories/10702

Source: cve@mitre.org

http://secunia.com/advisories/10720

Source: cve@mitre.org

http://secunia.com/advisories/10722

Source: cve@mitre.org

http://secunia.com/advisories/9962/

Source: cve@mitre.org

http://www.debian.org/security/2004/dsa-428

Source: cve@mitre.org

PatchVendor Advisory

http://www.ebitech.sk/patrik/SA/SA-20031006-A.txt

Source: cve@mitre.org

http://www.ebitech.sk/patrik/SA/SA-20031006.txt

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2004:004

Source: cve@mitre.org

http://www.redhat.com/archives/fedora-announce-list/2004-January/msg00009.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2004-041.html

Source: cve@mitre.org

http://www.trustix.org/errata/misc/2004/TSL-2004-0005-slocate.asc.txt

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11033

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A821

Source: cve@mitre.org

ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Workstation/CSSA-2004-001.0/CSSA-2004-001.0.txt (unsafe URL)