Lucene search

K
freebsdFreeBSD322D4FF6-85C3-11D8-A41F-0020ED76EF5A
HistorySep 19, 2003 - 12:00 a.m.

Midnight Commander buffer overflow during symlink resolution

2003-09-1900:00:00
vuxml.freebsd.org
8

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.133 Low

EPSS

Percentile

95.5%

Midnight Commander uses a fixed sized stack buffer while
resolving symbolic links within file archives (tar or cpio).
If an attacker can cause a user to process a specially
crafted file archive with Midnight Commander,
the attacker may be able to obtain the privileges of the
target user.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchmc< 4.6.0_9UNKNOWN

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.133 Low

EPSS

Percentile

95.5%

Related for 322D4FF6-85C3-11D8-A41F-0020ED76EF5A