CVE-2012-4463

Midnight Commander mc 4.8.5 does not properly handle the 1 MCEXTSELECTED or 2 MCEXTONLYTAGGED environment variables when multiple files are selected, which allows user-assisted remote attackers to execute arbitrary commands via a crafted file name...

CVE-2012-4463

Affected software: GNU Midnight Commander (mc) 4.8.5 and similar releases. Vulnerability: improper handling/sanitization of environment variables MC_EXT_SELECTED and MC_EXT_ONLYTAGGED when multiple files are selected, enabling a user‑assisted remote attacker to execute arbitrary commands via a cr...

CVE-2012-4463

Midnight Commander mc 4.8.5 does not properly handle the 1 MCEXTSELECTED or 2 MCEXTONLYTAGGED environment variables when multiple files are selected, which allows user-assisted remote attackers to execute arbitrary commands via a crafted file name...

CVE-2012-4463

Midnight Commander mc 4.8.5 does not properly handle the 1 MCEXTSELECTED or 2 MCEXTONLYTAGGED environment variables when multiple files are selected, which allows user-assisted remote attackers to execute arbitrary commands via a crafted file name...

PT-2012-5414

Name of the Vulnerable Software and Affected Versions Midnight Commander version 4.8.5 Description The issue arises from improper handling of the MC EXT SELECTED or MC EXT ONLYTAGGED environment variables when multiple files are selected. This allows remote attackers to execute arbitrary commands...

CVE-2012-4463: Improper Input Validation

Midnight Commander mc 4.8.5 does not properly handle the 1 MCEXTSELECTED or 2 MCEXTONLYTAGGED environment variables when multiple files are selected, which allows user-assisted remote attackers to execute arbitrary commands via a crafted file name...

MDVA-2009:191 : mc

This update updates Midnight Commander to latest version, which fixes occasional crashes when searching within editor/browser. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network...

SLES9: Security update for Midnight Commander

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mc For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5011441 within the SuSE...

SLES9: Security update for Midnight Commander (mc)

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mc More details may also be found by searching for keyword 5020406 within the SuSE Enterprise Server 9 patch database at...

SLES9: Security update for Midnight Commander (mc)

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mc More details may also be found by searching for keyword 5020406 within the SuSE Enterprise Server 9 patch database linked in the references...

SLES9: Security update for Midnight Commander

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mc For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5011441 within the SuSE...

SuSE9 Security Update : Midnight Commander (YOU Patch Number 9797)

Various security bugs ranging from denial of service conditions to command execution have been fixed. CVE-2004-1004, CVE-2004-1005, CVE-2004-1176 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

FreeBSD : Midnight Commander buffer overflow during symlink resolution (322d4ff6-85c3-11d8-a41f-0020ed76ef5a)

Midnight Commander uses a fixed sized stack buffer while resolving symbolic links within file archives tar or cpio. If an attacker can cause a user to process a specially crafted file archive with Midnight Commander, the attacker may be able to obtain the privileges of the target user...

FreeBSD : Midnight Commander buffer overflows, format string bugs, and insecure temporary file handling (0c6f3fde-9c51-11d8-9366-0020ed76ef5a)

Jakub Jelinek reports several security related bugs in Midnight Commander, including : - Multiple buffer overflows CVE-2004-0226 - Insecure temporary file handling CVE-2004-0231 - Format string bug CVE-2004-0232 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Gentoo Security Advisory GLSA 200403-09 (mc)

The remote host is missing updates announced in advisory GLSA 200403-09. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200502-24 (mc)

The remote host is missing updates announced in advisory GLSA 200502-24. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200405-21 (MC)

The remote host is missing updates announced in advisory GLSA 200405-21. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200502-24 (mc)

The remote host is missing updates announced in advisory GLSA 200502-24. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200403-09 (mc)

The remote host is missing updates announced in advisory GLSA 200403-09. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200405-21 (MC)

The remote host is missing updates announced in advisory GLSA 200405-21. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...