Description
Secure Locate (slocate) in Red Hat Linux allows local users to gain privileges via a malformed configuration file that is specified in the LOCATE_PATH environmental variable.
References
- 20000621 rh 6.2 - gid compromises, etc mailing-list
- 1385 vdb-entry