Unscored severity · published Aug 31, 2001
CVE-2001-1036
GNU locate in findutils 4.1 on Slackware 7.1 and 8.0 allows local users to gain privileges via an old formatted filename database (locatedb) that contains an entry with an…
–
CVSS
0.9%
EPSS
No
On KEV
Description
GNU locate in findutils 4.1 on Slackware 7.1 and 8.0 allows local users to gain privileges via an old formatted filename database (locatedb) that contains an entry with an out-of-range offset, which causes locate to write to arbitrary process memory.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 59% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FI
Findutils · Gnu
4.0; 4.1 · source: NVD
SL
Slackware Linux · Slackware
7.1; 8.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-1036
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-1036
www.osvdb.org
http://www.osvdb.org/5477
www.securityfocus.com
http://www.securityfocus.com/archive/1/200991
Exploit
http://www.securityfocus.com/bid/3127
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/6932
More from Findutils
–
CVE-2007-2452
Heap-based buffer overflow in the visit_old_format function in locate/locate.c in locate in GNU findutils before 4.2.31 might allow context-dependent attackers to execute…