SUSE CVE-2004-0226

Multiple buffer overflows in Midnight Commander mc before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code...

SUSE CVE-2004-0232

Multiple format string vulnerabilities in Midnight Commander mc before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code...

SUSE CVE-2004-0231

Multiple vulnerabilities in Midnight Commander mc before 4.6.0, with unknown impact, related to "Insecure temporary file and directory creations."...

SUSE CVE-2004-1005

Multiple buffer overflows in Midnight Commander mc 4.5.55 and earlier allow remote attackers to have an unknown impact...

SUSE CVE-2004-1004

Multiple format string vulnerabilities in Midnight Commander mc 4.5.55 and earlier allow remote attackers to have an unknown impact...

SUSE CVE-2004-1009

Midnight commander mc 4.5.55 and earlier allows remote attackers to cause a denial of service infinite loop via unknown attack vectors...

SUSE CVE-2004-1093

Midnight commander mc 4.5.55 and earlier allows remote attackers to cause a denial of service via "use of already freed memory."...

SUSE CVE-2004-1090

Midnight commander mc 4.5.55 and earlier allows remote attackers to cause a denial of service via "a corrupt section header."...

SUSE CVE-2004-1092

Midnight commander mc 4.5.55 and earlier allows remote attackers to cause a denial of service by causing mc to free unallocated memory...

SUSE CVE-2004-1091

Midnight commander mc 4.5.55 and earlier allows remote attackers to cause a denial of service by triggering a null dereference...

SUSE CVE-2004-1175

fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," possibly using shell metacharacters...

SUSE CVE-2004-1176

Buffer underflow in extfs.c in Midnight Commander mc 4.5.55 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code...

SUSE CVE-2004-1174

direntry.c in Midnight Commander mc 4.5.55 and earlier allows attackers to cause a denial of service by "manipulating non-existing file handles."...

SUSE CVE-2005-0763

Buffer overflow in Midnight Commander mc 4.5.55 and earlier may allow attackers to execute arbitrary code...

SUSE CVE-2012-4463

Midnight Commander mc 4.8.5 does not properly handle the 1 MCEXTSELECTED or 2 MCEXTONLYTAGGED environment variables when multiple files are selected, which allows user-assisted remote attackers to execute arbitrary commands via a crafted file name...

SUSE CVE-2021-36370

An issue was discovered in Midnight Commander through 4.8.26. When establishing an SFTP connection, the fingerprint of the server is neither checked nor displayed. As a result, a user connects to the server without the ability to verify its authenticity...

Ubuntu: Security Advisory (USN-5160-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5160-1 mc vulnerability

It was discovered that Midnight Commander would not check server fingerprints when establishing an SFTP connection. If a remote attacker were able to intercept communications this flaw could be exploited to impersonate the SFTP server...

USN-5160-1: Midnight Commander vulnerability

It was discovered that Midnight Commander would not check server fingerprints when establishing an SFTP connection. If a remote attacker were able to intercept communications this flaw could be exploited to impersonate the SFTP server...

OESA-2022-1771 mc security update

GNU Midnight Commander is a visual file manager, licensed under GNU General Public License and therefore qualifies as Free Software. It's a feature rich full-screen text mode application that allows you to copy, move and delete files and whole directory trees, search for files and run commands in...