CVE-2004-0927

ServerAdmin in Mac OS X 10.2.8 through 10.3.5 uses the same example self-signed certificate on each system, which allows remote attackers to decrypt sessions...

CVE-2004-0881

getmail 4.x before 4.2.0, and other versions before 3.2.5, when run as root, allows local users to write files in arbitrary directories via a symlink attack on subdirectories in the maildir...

CVE-2004-1340

Debian GNU/Linux 3.0 installs the libpam-radius-auth package with the pamradiusauth.conf set to be world-readable, which allows local users to obtain sensitive information...

CVE-2004-1093

CVE-2004-1093 affects Midnight Commander (mc) up to version 4.5.55. The issue is a memory-management vulnerability (use-after-free) that can cause a denial of service when a vulnerable file/operation triggers freeing of memory that is subsequently used. Public references in the provided documents...

CVE-2004-1175

fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," possibly using shell metacharacters...

CVE-2004-1091

Midnight commander mc 4.5.55 and earlier allows remote attackers to cause a denial of service by triggering a null dereference...

CVE-2004-1009

Midnight commander mc 4.5.55 and earlier allows remote attackers to cause a denial of service infinite loop via unknown attack vectors...

CVE-2004-1005

CVE-2004-1005 refers to multiple buffer overflows in Midnight Commander (mc) 4.5.55 and earlier. The initial description notes remote attackers could trigger these issues with unknown impact, and connected advisories (e.g., Debian DSA 639-1, Gentoo GLSA 200502-24, SuSE OpenVAS entries) indicate t...

CVE-2004-1090

Midnight commander mc 4.5.55 and earlier allows remote attackers to cause a denial of service via "a corrupt section header."...

CVE-2004-1181

CVE-2004-1181 corresponds to the Debian htmlheadline issue (DSA-622-1) involving insecure temporary files that allow local users to overwrite arbitrary files via a symlink attack. Public details in connected docs identify the vulnerable component as htmlheadline, with the root cause stemming from...

CVE-2004-1176

CVE-2004-1176 : A buffer underflow in extfs.c of Midnight Commander (mc) prior to 4.5.56 allows remote attackers to cause a denial of service and possibly execute arbitrary code. Documents consistently describe the issue as a remote vulnerability affecting mc with the buffer underflow in the extf...

CVE-2004-1004

Multiple format string vulnerabilities in Midnight Commander mc 4.5.55 and earlier allow remote attackers to have an unknown impact...

CVE-2004-1174

The CVE-2004-1174 vulnerability affects Midnight Commander (mc) up to and including version 4.5.55, in which direntry.c contains the flaw that allows a denial of service via manipulating non-existing file handles. The description clearly states this is a denial of service condition caused by the ...

CVE-2004-1091

CVE-2004-1091 affects Midnight Commander (mc) up to version 4.5.55 and earlier, where a remote user can cause a denial of service by triggering a null pointer dereference. The issue is listed among multiple MC vulnerabilities (with related CVEs) and is discussed in various advisories and vulnerab...

CVE-2004-1092

Midnight commander mc 4.5.55 and earlier allows remote attackers to cause a denial of service by causing mc to free unallocated memory...

CVE-2004-1174

direntry.c in Midnight Commander mc 4.5.55 and earlier allows attackers to cause a denial of service by "manipulating non-existing file handles."...

CVE-2004-1181

htmlheadline before 21.8 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2004-1176

Buffer underflow in extfs.c in Midnight Commander mc 4.5.55 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code...

CVE-2004-1092

CVE-2004-1092 affects Midnight Commander (mc) 4.5.55 and earlier. The issue allows remote Denial-of-Service by causing mc to free unallocated memory (root cause: improper memory handling). The connected sources indicate a fix in Midnight Commander 4.6.0. Remediation: upgrade to MC 4.6.0 or newer ...

CVE-2004-1004

CVE-2004-1004 affects Midnight Commander (mc) up to version 4.5.55 with multiple format string vulnerabilities. The provided connected advisories confirm that various distros release patches (e.g., SUSE SLES9 patch 5011441, Gentoo GLSA 200502-24, Debian DSA 639-1) to fix these issues. The CVE ent...