Exploitation Summary
EIP tracks 1 public exploit for CVE-2001-1036. PoCs published by Josh Smith.
AI-analyzed exploit summary This exploit targets a boundary condition error in GNU locate (pre-4.0) by crafting a malicious database entry. It leverages a buffer overflow to execute arbitrary shellcode, potentially leading to remote code execution when a user runs the locate program.
Description
GNU locate in findutils 4.1 on Slackware 7.1 and 8.0 allows local users to gain privileges via an old formatted filename database (locatedb) that contains an entry with an out-of-range offset, which causes locate to write to arbitrary process memory.
Exploits (1)
This exploit targets a boundary condition error in GNU locate (pre-4.0) by crafting a malicious database entry. It leverages a buffer overflow to execute arbitrary shellcode, potentially leading to remote code execution when a user runs the locate program.