What’s Vulnerable › Vulnerabilities

CVE-2003-0848

• Severity: medium (CVSS 4.6 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2003-11-17 · updated 2026-06-16

Description

Heap-based buffer overflow in main.c of slocate 2.6, and possibly other versions, may allow local users to gain privileges via a modified slocate database that causes a negative "pathlen" value to be used.

Affected products

• Slocate: 2.1, 2.2, 2.3, 2.4, 2.5, 2.6

References

• http://marc.info/?l=bugtraq&m=106546447321274&w=2
• http://marc.info/?l=bugtraq&m=106589631819348&w=2
• http://rhn.redhat.com/errata/RHSA-2004-040.html
• http://secunia.com/advisories/10670
• http://secunia.com/advisories/10683
• http://secunia.com/advisories/10686
• http://secunia.com/advisories/10698
• http://secunia.com/advisories/10702
• http://secunia.com/advisories/10720

Get alerted when CVE-2003-0848 or the next vulnerability affects your stack