Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

midnight commander midnight commander vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2023-45925
GNU Midnight Commander 4.8.29-146-g299d9a2fb exists to contain a NULL pointer dereference via the function x_error_handler() at tty/x11conn.c. NOTE: this is disputed because it should be categorized as a usability problem (an X operation silently fails).
5
CVSSv2
CVE-2021-36370
An issue exists in Midnight Commander up to and including 4.8.26. When establishing an SFTP connection, the fingerprint of the server is neither checked nor displayed. As a result, a user connects to the server without the ability to verify its authenticity.
Midnight-commander Midnight Commander
5.1
CVSSv2
CVE-2012-4463
Midnight Commander (mc) 4.8.5 does not properly handle the (1) MC_EXT_SELECTED or (2) MC_EXT_ONLYTAGGED environment variables when multiple files are selected, which allows user-assisted remote malicious users to execute arbitrary commands via a crafted file name.
Midnight-commander Midnight Commander 4.8.5
4.6
CVSSv2
CVE-2005-0763
Buffer overflow in Midnight Commander (mc) 4.5.55 and previous versions may allow malicious users to execute arbitrary code.
Midnight Commander Midnight Commander
5
CVSSv2
CVE-2004-1092
Midnight commander (mc) 4.5.55 and previous versions allows remote malicious users to cause a denial of service by causing mc to free unallocated memory.
Midnight Commander Midnight Commander 4.5.40Midnight Commander Midnight Commander 4.5.41Midnight Commander Midnight Commander 4.5.48Midnight Commander Midnight Commander 4.5.49Midnight Commander Midnight Commander 4.5.42Midnight Commander Midnight Commander 4.5.43Midnight Commander Midnight Commander 4.5.50Midnight Commander Midnight Commander 4.5.51Midnight Commander Midnight Commander 4.5.46Midnight Commander Midnight Commander 4.5.47Midnight Commander Midnight Commander 4.6Midnight Commander Midnight Commander 4.5.44Midnight Commander Midnight Commander 4.5.45Midnight Commander Midnight Commander 4.5.52Midnight Commander Midnight Commander 4.5.54Midnight Commander Midnight Commander 4.5.55Debian Debian Linux 3.0Redhat Enterprise Linux 2.1Redhat Linux Advanced Workstation 2.1Suse Suse Linux 9.1Suse Suse Linux 9.2Suse Suse Linux 8.0
7.5
CVSSv2
CVE-2004-1175
fish.c in midnight commander allows remote malicious users to execute arbitrary programs via "insecure filename quoting," possibly using shell metacharacters.
Midnight Commander Midnight Commander 4.5.40Midnight Commander Midnight Commander 4.5.41Midnight Commander Midnight Commander 4.5.48Midnight Commander Midnight Commander 4.5.49Midnight Commander Midnight Commander 4.5.44Midnight Commander Midnight Commander 4.5.45Midnight Commander Midnight Commander 4.5.52Midnight Commander Midnight Commander 4.5.54Midnight Commander Midnight Commander 4.5.42Midnight Commander Midnight Commander 4.5.43Midnight Commander Midnight Commander 4.5.50Midnight Commander Midnight Commander 4.5.51Midnight Commander Midnight Commander 4.5.46Midnight Commander Midnight Commander 4.5.47Midnight Commander Midnight Commander 4.5.55Midnight Commander Midnight Commander 4.6Debian Debian Linux 3.0Redhat Enterprise Linux 2.1Redhat Linux Advanced Workstation 2.1Suse Suse Linux 9.0Suse Suse Linux 9.1Gentoo Linux
7.5
CVSSv2
CVE-2004-1176
Buffer underflow in extfs.c in Midnight Commander (mc) 4.5.55 and previous versions allows remote malicious users to cause a denial of service and possibly execute arbitrary code.
Midnight Commander Midnight Commander 4.5.41Midnight Commander Midnight Commander 4.5.45Midnight Commander Midnight Commander 4.5.46Midnight Commander Midnight Commander 4.5.54Midnight Commander Midnight Commander 4.5.55Midnight Commander Midnight Commander 4.5.42Midnight Commander Midnight Commander 4.5.49Midnight Commander Midnight Commander 4.5.50Midnight Commander Midnight Commander 4.5.43Midnight Commander Midnight Commander 4.5.44Midnight Commander Midnight Commander 4.5.51Midnight Commander Midnight Commander 4.5.52Midnight Commander Midnight Commander 4.5.40Midnight Commander Midnight Commander 4.5.47Midnight Commander Midnight Commander 4.5.48Midnight Commander Midnight Commander 4.6Debian Debian Linux 3.0Redhat Enterprise Linux 2.1Suse Suse Linux 8.1Suse Suse Linux 8.2Turbolinux Turbolinux Workstation 8.0Redhat Linux Advanced Workstation 2.1
7.5
CVSSv2
CVE-2004-1004
Multiple format string vulnerabilities in Midnight Commander (mc) 4.5.55 and previous versions allow remote malicious users to have an unknown impact.
Midnight Commander Midnight Commander 4.5.43Midnight Commander Midnight Commander 4.5.44Midnight Commander Midnight Commander 4.5.51Midnight Commander Midnight Commander 4.5.52Midnight Commander Midnight Commander 4.5.40Midnight Commander Midnight Commander 4.5.47Midnight Commander Midnight Commander 4.5.48Midnight Commander Midnight Commander 4.6Midnight Commander Midnight Commander 4.5.41Midnight Commander Midnight Commander 4.5.42Midnight Commander Midnight Commander 4.5.49Midnight Commander Midnight Commander 4.5.50Midnight Commander Midnight Commander 4.5.45Midnight Commander Midnight Commander 4.5.46Midnight Commander Midnight Commander 4.5.54Midnight Commander Midnight Commander 4.5.55Debian Debian Linux 3.0Gentoo LinuxSuse Suse Linux 8.0Turbolinux Turbolinux Server 8.0Turbolinux Turbolinux Workstation 7.0Redhat Enterprise Linux 2.1
7.5
CVSSv2
CVE-2004-1005
Multiple buffer overflows in Midnight Commander (mc) 4.5.55 and previous versions allow remote malicious users to have an unknown impact.
Midnight Commander Midnight Commander 4.5.44Midnight Commander Midnight Commander 4.5.45Midnight Commander Midnight Commander 4.5.52Midnight Commander Midnight Commander 4.5.54Midnight Commander Midnight Commander 4.5.40Midnight Commander Midnight Commander 4.5.41Midnight Commander Midnight Commander 4.5.48Midnight Commander Midnight Commander 4.5.49Midnight Commander Midnight Commander 4.5.42Midnight Commander Midnight Commander 4.5.43Midnight Commander Midnight Commander 4.5.50Midnight Commander Midnight Commander 4.5.51Midnight Commander Midnight Commander 4.5.46Midnight Commander Midnight Commander 4.5.47Midnight Commander Midnight Commander 4.5.55Midnight Commander Midnight Commander 4.6Debian Debian Linux 3.0Redhat Enterprise Linux 2.1Redhat Linux Advanced Workstation 2.1Suse Suse Linux 9.1Suse Suse Linux 9.2Gentoo Linux
5
CVSSv2
CVE-2004-1009
Midnight commander (mc) 4.5.55 and previous versions allows remote malicious users to cause a denial of service (infinite loop) via unknown attack vectors.
Midnight Commander Midnight Commander 4.5.40Midnight Commander Midnight Commander 4.5.47Midnight Commander Midnight Commander 4.5.48Midnight Commander Midnight Commander 4.6Midnight Commander Midnight Commander 4.5.43Midnight Commander Midnight Commander 4.5.44Midnight Commander Midnight Commander 4.5.51Midnight Commander Midnight Commander 4.5.52Midnight Commander Midnight Commander 4.5.41Midnight Commander Midnight Commander 4.5.42Midnight Commander Midnight Commander 4.5.49Midnight Commander Midnight Commander 4.5.50Midnight Commander Midnight Commander 4.5.45Midnight Commander Midnight Commander 4.5.46Midnight Commander Midnight Commander 4.5.54Midnight Commander Midnight Commander 4.5.55Debian Debian Linux 3.0Gentoo LinuxSuse Suse Linux 8.0Turbolinux Turbolinux Server 8.0Turbolinux Turbolinux Workstation 7.0Redhat Linux Advanced Workstation 2.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-29895blind SQL injectionCVE-2024-5064CVE-2023-52677CVE-2023-52682CVE-2024-30051CVE-2024-35849remote attackersremote
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook