VULNERABILITY INTELLIGENCE

CVE-2001-1036

CVSS score7.2 HIGH
EPSS probability0.90%
CISA KEVNot currently listed
Published2001-08-31
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C

Description

GNU locate in findutils 4.1 on Slackware 7.1 and 8.0 allows local users to gain privileges via an old formatted filename database (locatedb) that contains an entry with an out-of-range offset, which causes locate to write to arbitrary process memory.

Primary references