(RHSA-2004:035) mc security update

2004-02-0300:00:00

access.redhat.com

0.133 Low

EPSS

Percentile

95.6%

JSON

Midnight Commander is a visual shell much like a file manager.

A buffer overflow has been found in Midnight Commander’s virtual filesystem
code. Specifically, a stack-based buffer overflow in vfs_s_resolve_symlink
of vfs/direntry.c allows remote attackers to execute arbitrary code during
symlink conversion.

Users of Midnight Commander should install these updated packages, which
resolve this issue.

OSVersionArchitecturePackageVersionFilename
RedHatanyi386mcserv< 4.5.51-36.1mcserv-4.5.51-36.1.i386.rpm
RedHatanyi386gmc< 4.5.51-36.1gmc-4.5.51-36.1.i386.rpm
RedHatanyia64mcserv< 4.5.51-36.1mcserv-4.5.51-36.1.ia64.rpm
RedHatanyi386mc< 4.5.51-36.1mc-4.5.51-36.1.i386.rpm
RedHatanyia64gmc< 4.5.51-36.1gmc-4.5.51-36.1.ia64.rpm
RedHatanyia64mc< 4.5.51-36.1mc-4.5.51-36.1.ia64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	i386	mcserv	< 4.5.51-36.1	mcserv-4.5.51-36.1.i386.rpm
RedHat	any	i386	gmc	< 4.5.51-36.1	gmc-4.5.51-36.1.i386.rpm
RedHat	any	ia64	mcserv	< 4.5.51-36.1	mcserv-4.5.51-36.1.ia64.rpm
RedHat	any	i386	mc	< 4.5.51-36.1	mc-4.5.51-36.1.i386.rpm
RedHat	any	ia64	gmc	< 4.5.51-36.1	gmc-4.5.51-36.1.ia64.rpm
RedHat	any	ia64	mc	< 4.5.51-36.1	mc-4.5.51-36.1.ia64.rpm

0.133 Low

EPSS

Percentile

95.6%

JSON

Related for RHSA-2004:035