CVE-2007-0227 json
slocate 3.1 does not properly manage database entries that specify names of files in protected directories, which allows local users to obt…
published 2007-01-13 19 y ago modified 2026-06-16 4 mo ago also EUVD-2007-0229
- cvss
- 5.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.7%
- EPSS 1.7% chance of exploitation in 30 days, percentile 77%
- public exploits
- 0
- none known
Summary
slocate 3.1 does not properly manage database entries that specify names of files in protected directories, which allows local users to obtain the names of private files. NOTE: another researcher reports that the issue is not present in slocate 2.7.
Exploit prediction
1.74% chance of exploitation in the next 30 days, higher than 77% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:P/I:N/A:N |
References
-
ubuntu.com
/usn/usn-425-1
vendor-advisory
-
osvdb.org
/33465
vdb-entry
-
securityfocus.com
/archive/1/456739/100/0/threaded
mailing-list
-
securityfocus.com
/bid/21989
vdb-entry
-
securityfocus.com
/archive/1/456530/100/0/threaded
mailing-list
-
securityfocus.com
/archive/1/456489/100/0/threaded
mailing-list
-
securityfocus.com
/archive/1/456593/100/0/threaded
mailing-list
-
securityfocus.com
/archive/1/464220/30/7320/threaded
mailing-list
Sources
- CVE List CVE-2007-0227
- NVD CVE-2007-0227
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.