GNU Locate Arbitrary Command Execution Vulnerability
BID:3127
Info
GNU Locate Arbitrary Command Execution Vulnerability
| Bugtraq ID: | 3127 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Aug 01 2001 12:00AM |
| Updated: | Aug 01 2001 12:00AM |
| Credit: | Reported to Bugtraq by Josh Smith <[email protected]> on August 1, 2001. |
| Vulnerable: |
GNU findutils 4.1 GNU findutils 4.0 |
| Not Vulnerable: | |
Discussion
GNU Locate Arbitrary Command Execution Vulnerability
GNU locate is an application that searches file databases for file names that match user-supplied patterns.
A boundary condition error can occur when the program reads database files composed in an "old" format, produced by GNU locate prior to version 4.0 and by Unix versions of locate and find. If an attacker is able to write a malicious entry to a database file used by other users, the attacker could cause arbitrary code to be executed by another user when the user runs the locate program.
It also should be noted that in earlier versions of Slackware(circa 3.5) the file is written by the superuser.
GNU locate is an application that searches file databases for file names that match user-supplied patterns.
A boundary condition error can occur when the program reads database files composed in an "old" format, produced by GNU locate prior to version 4.0 and by Unix versions of locate and find. If an attacker is able to write a malicious entry to a database file used by other users, the attacker could cause arbitrary code to be executed by another user when the user runs the locate program.
It also should be noted that in earlier versions of Slackware(circa 3.5) the file is written by the superuser.
Solution / Fix
GNU Locate Arbitrary Command Execution Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
GNU Locate Arbitrary Command Execution Vulnerability
References:
References: