VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Aug 31, 2001· Updated Apr 16, 2026

CVE-2001-1036

CVE-2001-1036

Description

GNU locate in findutils 4.1 on Slackware 7.1 and 8.0 allows local users to gain privileges via an old formatted filename database (locatedb) that contains an entry with an out-of-range offset, which causes locate to write to arbitrary process memory.

Affected products

4
  • GNU/Findutils2 versions
    cpe:2.3:a:gnu:findutils:4.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:gnu:findutils:4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:gnu:findutils:4.1:*:*:*:*:*:*:*
  • Slackware/Slackware Linux2 versions
    cpe:2.3:o:slackware:slackware_linux:7.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:slackware:slackware_linux:7.1:*:*:*:*:*:*:*
    • cpe:2.3:o:slackware:slackware_linux:8.0:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

News mentions

0

No linked articles in our index yet.