Lucene search

K
osvGoogleOSV:DSA-497
HistoryApr 29, 2004 - 12:00 a.m.

mc - several vulnerabilities

2004-04-2900:00:00
Google
osv.dev
8

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

Jacub Jelinek discovered several vulnerabilities in the Midnight
Commander, a powerful file manager for GNU/Linux systems. The
problems were classified as follows:

CAN-2004-0226 Buffer overflows

CAN-2004-0231 Insecure temporary file and directory creations

CAN-2004-0232 Format string problems

For the stable distribution (woody) this problem has been fixed in
version 4.5.55-1.2woody3.

For the unstable distribution (sid) this problem will be fixed soon.

We recommend that you upgrade your mc packages.

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C