CVE-2003-0056

Description

Buffer overflow in secure locate (slocate) before 2.7 allows local users to execute arbitrary code via a long (1) -c or (2) -r command line argument.

7.2

CVSS

Severity: High

CVSS 2.0 •

EPSS 0.21%

Vendor Advisory net-security.org Vendor Advisory sgi.com Vendor Advisory mandriva.com Vendor Advisory debian.org Vendor Advisory redhat.com Vendor Advisory sco.com Vendor Advisory org.uk

Affected: n/a n/a

Link	Tags
http://secunia.com/advisories/8236	third party advisory
http://www.net-security.org/advisory.php?id=2010	vendor advisory
ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc	vendor advisory
http://secunia.com/advisories/7982	third party advisory
http://www.usg.org.uk/advisories/2003.001.txt	vendor advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2003:015	vendor advisory
http://secunia.com/advisories/10720	third party advisory
http://www.debian.org/security/2003/dsa-252	patch vendor advisory
http://marc.info/?l=bugtraq&m=104348607205691&w=2	mailing list
http://marc.info/?l=bugtraq&m=104428624705363&w=2	mailing list
http://secunia.com/advisories/8118/	third party advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11369	vdb entry signature
http://rhn.redhat.com/errata/RHSA-2004-041.html	vendor advisory
http://marc.info/?l=bugtraq&m=104342864418213&w=2	mailing list
http://secunia.com/advisories/8749	third party advisory
ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-009.0.txt	vendor advisory
http://secunia.com/advisories/7947	third party advisory
http://secunia.com/advisories/8007	third party advisory

What is the severity of CVE-2003-0056?: CVE-2003-0056 has been scored as a high severity vulnerability.
How to fix CVE-2003-0056?: To fix CVE-2003-0056, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2003-0056 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2003-0056 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.