Lucene search
K

GNU Midnight Commander: User-assisted execution of arbitrary code

🗓️ 20 Feb 2014 00:00:00Reported by Gentoo FoundationType 
gentoo
 gentoo
🔗 security.gentoo.org👁 23 Views

GNU Midnight Commander does not sanitize environment variables, leading to user-assisted execution of arbitrary code

Related
Packages
ReporterTitlePublishedViews
Family
CVE
CVE-2012-4463
10 Oct 201218:00
cve
Cvelist
CVE-2012-4463
10 Oct 201218:00
cvelist
Debian CVE
CVE-2012-4463
10 Oct 201218:00
debiancve
EUVD
EUVD-2012-4392
7 Oct 202500:30
euvd
Fedora
[SECURITY] Fedora 17 Update: mc-4.8.6-2.fc17
7 Dec 201203:27
fedora
Fedora
[SECURITY] Fedora 18 Update: mc-4.8.6-2.fc18
4 Dec 201205:21
fedora
Tenable Nessus
Fedora 18 : mc-4.8.6-2.fc18 (2012-19335)
4 Dec 201200:00
nessus
Tenable Nessus
Fedora 17 : mc-4.8.6-2.fc17 (2012-19349)
7 Dec 201200:00
nessus
Tenable Nessus
GLSA-201402-18 : GNU Midnight Commander: User-assisted execution of arbitrary code
21 Feb 201400:00
nessus
NVD
CVE-2012-4463
10 Oct 201218:55
nvd
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Gentooanyallapp-misc/mc4.8.7UNKNOWN

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

20 Feb 2014 00:00Current
7High risk
Vulners AI Score7
CVSS 25.1
EPSS0.00638
23