PT-2001-2182 · Gnu · Findutils

Publicado 2001-08-31 · Atualizado 2017-10-10 · CVE-2001-1036

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions findutils version 4.1

Description The issue allows local users to gain privileges via an old formatted filename database that contains an entry with an out-of-range offset, causing the locate function to write to arbitrary process memory.

Recommendations For findutils version 4.1, update to a newer version that fixes this issue to prevent local users from gaining privileges.

Exploit

Correção

Identificadores relacionados

CVE-2001-1036

Produtos afetados

Findutils

Referências · 6

• 🔥 https://exploit-db.com/exploits/21043 · Exploit
• 🔥 http://securityfocus.com/bid/3127 · Exploit
• http://osvdb.org/5477 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-1036 · Nota de Segurança
• http://securityfocus.com/archive/1/200991 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6932 · Nota