CVE-2003-0848

Description

Heap-based buffer overflow in main.c of slocate 2.6, and possibly other versions, may allow local users to gain privileges via a modified slocate database that causes a negative "pathlen" value to be used.

4.6

CVSS

Severity: Medium

CVSS 2.0 •

EPSS 0.29%

Vendor Advisory sco.com Vendor Advisory sgi.com Vendor Advisory redhat.com Vendor Advisory sgi.com Vendor Advisory redhat.com Vendor Advisory mandriva.com Vendor Advisory debian.org Vendor Advisory redhat.com Vendor Advisory trustix.org

Affected: n/a n/a

References

Link	Tags
ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Workstation/CSSA-2004-001.0/CSSA-2004-001.0.txt	vendor advisory
ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc	vendor advisory
http://rhn.redhat.com/errata/RHSA-2004-040.html	vendor advisory
ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.asc	vendor advisory
http://www.redhat.com/support/errata/RHSA-2004-041.html	vendor advisory
http://www.ebitech.sk/patrik/SA/SA-20031006-A.txt
http://secunia.com/advisories/10720	third party advisory
http://secunia.com/advisories/10686	third party advisory
http://secunia.com/advisories/10722	third party advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2004:004	vendor advisory
http://secunia.com/advisories/10702	third party advisory
http://www.ebitech.sk/patrik/SA/SA-20031006.txt
http://www.debian.org/security/2004/dsa-428	patch vendor advisory
http://marc.info/?l=bugtraq&m=106589631819348&w=2	mailing list
http://secunia.com/advisories/10683	third party advisory
http://secunia.com/advisories/9962/	third party advisory
http://www.redhat.com/archives/fedora-announce-list/2004-January/msg00009.html	vendor advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11033	vdb entry signature
http://secunia.com/advisories/10670	third party advisory
http://marc.info/?l=bugtraq&m=106546447321274&w=2	mailing list
http://secunia.com/advisories/10698	third party advisory
http://www.trustix.org/errata/misc/2004/TSL-2004-0005-slocate.asc.txt	vendor advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A821	vdb entry signature

Frequently Asked Questions

What is the severity of CVE-2003-0848?: CVE-2003-0848 has been scored as a medium severity vulnerability.
How to fix CVE-2003-0848?: To fix CVE-2003-0848, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2003-0848 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2003-0848 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.