CVE:CVE-2000-0602
CNNVD:CNNVD-200006-080
Red Hat Linux中Secure Locate (slocate)存在漏洞。本地用户借助LOCATE_PATH环境变量中指定的畸形配置文件可以提升特权。
solution:Upgrade kevin_lindsay secure_locate to a higher version than 2.0,2.1,and avoid the version 2.0,2.1