slocate 3.1 does not properly manage database entries that specify names of files in protected directories, which allows local users to obtain the names of private files. NOTE: another researcher reports that the issue is not present in slocate 2.7.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Slocate | Slocate | 3.1 (including) | 3.1 (including) |
Slocate | Ubuntu | dapper | * |
Slocate | Ubuntu | devel | * |
Slocate | Ubuntu | edgy | * |
Slocate | Ubuntu | feisty | * |