882 matches found
CVE-2005-4066
The CVE-2005-4066 entry concerns Total Commander 6.53 storing FTP credentials in WCX_FTP.INI with weak encryption, enabling local users to decrypt passwords and access FTP servers. The vulnerability description and references consistently indicate local credential exposure as the impact; specific...
RHEL 2.1 : mc (RHSA-2005:512)
Updated mc packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Midnight Commander is a visual shell much like a file manager. Several denial of service bu...
gmc, mc, mcserv security update
CentOS Errata and Security Advisory CESA-2005:512-01 Updated mc packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Midnight Commander is a visual shell...
Moderate: Red Hat Security Advisory: mc security update
Updated mc packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Midnight Commander is a visual shell much like a file manager. Several denial of service bu...
CVE-2003-1168
CVE-2003-1168 affects HTTP Commander 4.0. A remote attacker can cause an error message to disclose the installation path by supplying a dot (.) in the file parameter, resulting in partial confidentiality impact. The description and linked sources indicate an information-disclosure vulnerability t...
CVE-2003-1166
CVE-2003-1166 describes a directory traversal vulnerability in HTTP Commander 4.0. The flaw affects the Openfile.aspx and Html.aspx components, where a .. (dot dot) in the file parameter can be used to view arbitrary files (remote access). Root cause: insufficient validation of the file parameter...
CVE-2003-1166
Directory traversal vulnerability in 1 Openfile.aspx and 2 Html.aspx in HTTP Commander 4.0 allows remote attackers to view arbitrary files via a .. dot dot in the file parameter...
CVE-2005-0763
Buffer overflow in Midnight Commander mc 4.5.55 and earlier may allow attackers to execute arbitrary code...
DEBIAN-CVE-2005-0763
Buffer overflow in Midnight Commander mc 4.5.55 and earlier may allow attackers to execute arbitrary code...
CVE-2005-0763
Buffer overflow in Midnight Commander mc 4.5.55 and earlier may allow attackers to execute arbitrary code...
CVE-2005-0763
Buffer overflow in Midnight Commander mc 4.5.55 and earlier may allow attackers to execute arbitrary code...
CVE-2004-1090
Midnight commander mc 4.5.55 and earlier allows remote attackers to cause a denial of service via "a corrupt section header."...
CVE-2004-1005
Multiple buffer overflows in Midnight Commander mc 4.5.55 and earlier allow remote attackers to have an unknown impact...
DEBIAN-CVE-2004-1091
Midnight commander mc 4.5.55 and earlier allows remote attackers to cause a denial of service by triggering a null dereference...
DEBIAN-CVE-2004-1174
direntry.c in Midnight Commander mc 4.5.55 and earlier allows attackers to cause a denial of service by "manipulating non-existing file handles."...
DEBIAN-CVE-2004-1175
fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," possibly using shell metacharacters...
CVE-2004-1005
Multiple buffer overflows in Midnight Commander mc 4.5.55 and earlier allow remote attackers to have an unknown impact...
CVE-2004-1009
Midnight commander mc 4.5.55 and earlier allows remote attackers to cause a denial of service infinite loop via unknown attack vectors...