864 matches found
CVE-2005-4066
Total Commander 6.53 uses weak encryption to store FTP usernames and passwords in WCXFTP.INI, which allows local users to decrypt the passwords and gain access to FTP servers, as possibly demonstrated by the W32.Gudeb worm...
CVE-2005-4066
The CVE-2005-4066 entry concerns Total Commander 6.53 storing FTP credentials in WCX_FTP.INI with weak encryption, enabling local users to decrypt passwords and access FTP servers. The vulnerability description and references consistently indicate local credential exposure as the impact; specific...
CVE-2005-4066
Total Commander 6.53 uses weak encryption to store FTP usernames and passwords in WCXFTP.INI, which allows local users to decrypt the passwords and gain access to FTP servers, as possibly demonstrated by the W32.Gudeb worm...
RHEL 2.1 : mc (RHSA-2005:512)
Updated mc packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Midnight Commander is a visual shell much like a file manager. Several denial of service bu...
gmc, mc, mcserv security update
CentOS Errata and Security Advisory CESA-2005:512-01 Updated mc packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Midnight Commander is a visual shell...
Moderate: Red Hat Security Advisory: mc security update
Updated mc packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Midnight Commander is a visual shell much like a file manager. Several denial of service bu...
CVE-2003-1168
CVE-2003-1168 affects HTTP Commander 4.0. A remote attacker can cause an error message to disclose the installation path by supplying a dot (.) in the file parameter, resulting in partial confidentiality impact. The description and linked sources indicate an information-disclosure vulnerability t...
CVE-2003-1166
CVE-2003-1166 describes a directory traversal vulnerability in HTTP Commander 4.0. The flaw affects the Openfile.aspx and Html.aspx components, where a .. (dot dot) in the file parameter can be used to view arbitrary files (remote access). Root cause: insufficient validation of the file parameter...
CVE-2003-1166
Directory traversal vulnerability in 1 Openfile.aspx and 2 Html.aspx in HTTP Commander 4.0 allows remote attackers to view arbitrary files via a .. dot dot in the file parameter...
CVE-2005-0763
Buffer overflow in Midnight Commander mc 4.5.55 and earlier may allow attackers to execute arbitrary code...
CVE-2005-0763
Buffer overflow in Midnight Commander mc 4.5.55 and earlier may allow attackers to execute arbitrary code...
CVE-2005-0763
Buffer overflow in Midnight Commander mc 4.5.55 and earlier may allow attackers to execute arbitrary code...
DEBIAN-CVE-2005-0763
Buffer overflow in Midnight Commander mc 4.5.55 and earlier may allow attackers to execute arbitrary code...
CVE-2004-1174
direntry.c in Midnight Commander mc 4.5.55 and earlier allows attackers to cause a denial of service by "manipulating non-existing file handles."...
CVE-2004-1175
fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," possibly using shell metacharacters...
CVE-2004-1090
Midnight commander mc 4.5.55 and earlier allows remote attackers to cause a denial of service via "a corrupt section header."...
CVE-2004-1093
Midnight commander mc 4.5.55 and earlier allows remote attackers to cause a denial of service via "use of already freed memory."...
CVE-2004-1005
Multiple buffer overflows in Midnight Commander mc 4.5.55 and earlier allow remote attackers to have an unknown impact...