Published: 18/08/2004 Updated: 11/07/2017

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 890

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Multiple buffer overflows in Midnight Commander (mc) prior to 4.6.0 may allow malicious users to cause a denial of service or execute arbitrary code.

Vulnerable Product	Search on Vulmon	Subscribe to Product
midnight commander midnight commander 4.5.41
midnight commander midnight commander 4.5.42
midnight commander midnight commander 4.5.49
midnight commander midnight commander 4.5.50
midnight commander midnight commander 4.5.45
midnight commander midnight commander 4.5.46
midnight commander midnight commander 4.5.55
midnight commander midnight commander 4.6
sgi propack 2.3
midnight commander midnight commander 4.5.43
midnight commander midnight commander 4.5.44
midnight commander midnight commander 4.5.51
midnight commander midnight commander 4.5.52
midnight commander midnight commander 4.5.40
midnight commander midnight commander 4.5.47
midnight commander midnight commander 4.5.48
sgi propack 2.4
gentoo linux 0.5
gentoo linux 0.7
slackware slackware linux
slackware slackware linux 9.0
gentoo linux 1.4
gentoo linux 1.1a
gentoo linux 1.2
slackware slackware linux 9.1

Synopsis mc security update Type/Severity Security Advisory: Important Topic Updated mc packages that resolve several buffer overflow vulnerabilities,one format string vulnerability and several temporary file creationvulnerabilities are now available Description Midnight Commander (mc) is ...

Jacub Jelinek discovered several vulnerabilities in the Midnight Commander, a powerful file manager for GNU/Linux systems The problems were classified as follows: CAN-2004-0226 Buffer overflows CAN-2004-0231 Insecure temporary file and directory creations CAN-2004-0232 Format string problems For the stable distribution (woody) this problem has bee ...

NVD-CWE-Other http://www.redhat.com/support/errata/RHSA-2004-172.html http://www.debian.org/security/2004/dsa-497 http://www.novell.com/linux/security/advisories/2004_12_mc.html http://security.gentoo.org/glsa/glsa-200405-21.xml http://www.mandriva.com/security/advisories?name=MDKSA-2004:039 https://exchange.xforce.ibmcloud.com/vulnerabilities/16016 https://access.redhat.com/errata/RHSA-2004:172 https://nvd.nist.gov https://www.debian.org/security/./dsa-497

CVE-2004-0226

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect