|
|
Family: Mandrake Local Security Checks --> Category: infos
MDKSA-2004:004: slocate Vulnerability Scan
Vulnerability Scan Summary
Check for the version of the slocate package
Detailed Explanation for this Vulnerability Test
The remote host is missing the patch for the advisory MDKSA-2004:004 (slocate).
A vulnerability was discovered by Patrik Hornik in slocate versions up to and
including 2.7 where a carefully crafted database could overflow a heap-based
buffer. This could be exploited by a local user to gain rights of the
'slocate' group. The updated packages contain a patch from Kevin Lindsay that
causes slocate to drop rights before reading a user-supplied database.
Solution : http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2004:004
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.
|
