Lucene search

[email protected]CVE-2000-1109

HistoryJan 09, 2001 - 5:00 a.m.

CVE-2000-1109

2001-01-0905:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2000-1109

midnight commander

version 4.5.51

local privilege escalation

directory names

special characters

6.9 Medium

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.3%

JSON

Midnight Commander (mc) 4.5.51 and earlier does not properly process malformed directory names when a user opens a directory, which allows other local users to gain privileges by creating directories that contain special characters followed by the commands to be executed.

CPENameOperatorVersion
midnight_commander:midnight_commandermidnight commandereq4.5.48
midnight_commander:midnight_commandermidnight commandereq4.5.40
midnight_commander:midnight_commandermidnight commandereq4.5.43
midnight_commander:midnight_commandermidnight commandereq4.5.50
midnight_commander:midnight_commandermidnight commandereq4.5.49
midnight_commander:midnight_commandermidnight commandereq4.5.42
midnight_commander:midnight_commandermidnight commandereq4.5.45
midnight_commander:midnight_commandermidnight commandereq4.5.44
midnight_commander:midnight_commandermidnight commandereq4.5.41
midnight_commander:midnight_commandermidnight commandereq4.5.46

CPE	Name	Operator	Version
midnight_commander:midnight_commander	midnight commander	eq	4.5.48
midnight_commander:midnight_commander	midnight commander	eq	4.5.40
midnight_commander:midnight_commander	midnight commander	eq	4.5.43
midnight_commander:midnight_commander	midnight commander	eq	4.5.50
midnight_commander:midnight_commander	midnight commander	eq	4.5.49
midnight_commander:midnight_commander	midnight commander	eq	4.5.42
midnight_commander:midnight_commander	midnight commander	eq	4.5.45
midnight_commander:midnight_commander	midnight commander	eq	4.5.44
midnight_commander:midnight_commander	midnight commander	eq	4.5.41
midnight_commander:midnight_commander	midnight commander	eq	4.5.46

Rows per page:

1-10 of 121

References

archives.neohapsis.com/archives/bugtraq/2000-11/0373.html

www.debian.org/security/2001/dsa-036

www.novell.com/linux/security/advisories/2001_011_mc.html

www.securityfocus.com/bid/2016

exchange.xforce.ibmcloud.com/vulnerabilities/5929

6.9 Medium

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.3%

JSON

Related for CVE-2000-1109

openvas2 nessus1 suse1