What’s Vulnerable › Vulnerabilities

CVE-2003-0056

• Severity: high (CVSS 7.2 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2003-02-19 · updated 2026-06-16

Description

Buffer overflow in secure locate (slocate) before 2.7 allows local users to execute arbitrary code via a long (1) -c or (2) -r command line argument.

Affected products

• Slocate: 2.5, 2.6

References

• http://marc.info/?l=bugtraq&m=104342864418213&w=2
• http://marc.info/?l=bugtraq&m=104348607205691&w=2
• http://marc.info/?l=bugtraq&m=104428624705363&w=2
• http://rhn.redhat.com/errata/RHSA-2004-041.html
• http://secunia.com/advisories/10720
• http://secunia.com/advisories/7947
• http://secunia.com/advisories/7982
• http://secunia.com/advisories/8007
• http://secunia.com/advisories/8118/
• http://secunia.com/advisories/8236

Get alerted when CVE-2003-0056 or the next vulnerability affects your stack