SLocate Path Malloc Integer Signing Heap Overflow Vulnerability
BID:7629
Info
SLocate Path Malloc Integer Signing Heap Overflow Vulnerability
| Bugtraq ID: | 7629 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2003-0326 |
| Remote: | No |
| Local: | Yes |
| Published: | May 20 2003 12:00AM |
| Updated: | Jul 11 2009 10:06PM |
| Credit: | Vulnerability discovery credited to "[email protected]" <[email protected]>. |
| Vulnerable: |
slocate slocate 2.7 slocate slocate 2.6 slocate slocate 2.5 slocate slocate 2.4 slocate slocate 2.3 slocate slocate 2.2 slocate slocate 2.1 |
| Not Vulnerable: | |
Discussion
SLocate Path Malloc Integer Signing Heap Overflow Vulnerability
It has been reported that slocate is vulnerable to an issue when handling data in the environment variable SLOCATE_PATH. Because of this problem, it may be possible for a local attacker to cause a heap corruption issue, potentially executing code.
It has been reported that slocate is vulnerable to an issue when handling data in the environment variable SLOCATE_PATH. Because of this problem, it may be possible for a local attacker to cause a heap corruption issue, potentially executing code.
Exploit / POC
SLocate Path Malloc Integer Signing Heap Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
SLocate Path Malloc Integer Signing Heap Overflow Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
SLocate Path Malloc Integer Signing Heap Overflow Vulnerability
References:
References:
- bazarr slocate ("[email protected]"
- Re: bazarr slocate (Matt Zimmerman