Red Hat Bugzilla – Bug 21388
heap corruption vulnerability
Last modified: 2014-03-16 22:17:24 EDT
The exploit leads to an egid=21(slocate) shell. Tested on RH 6.1,
but all versions of slocate shipped with at least RH 6.0 to RH 7 are
closing as errata release is out.