CVE-2005-0763

CVE-2005-0763 is a buffer overflow in Midnight Commander (mc) up to version 4.5.55 that can allow arbitrary code execution when handling certain crafted inputs, as reported across multiple advisories. Affected components include mc and related gmc/mcserv in Debian/RHEL/CentOS advisories, with the...

Debian DSA-698-1 : mc - buffer overflow

An unfixed buffer overflow has been discovered by Andrew V. Samoilov in mc, the midnight commander, a file browser and manager. This update also fixes a regression from DSA 497. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

HP-UX PHSS_17581 : s700_800 11.00 MC ServiceGuard 11.05 Cumulative Patch

s700800 11.00 MC ServiceGuard 11.05 Cumulative Patch : MC/ServiceGuard and MC/LockManager exhibit improper implementation of restricted SAM functionality. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch...

HP-UX Security patch : PHSS_17580

The remote host is missing HP-UX Security Patch number PHSS17580 . Security Vulnerability in MC/ServiceGuard & MC/LockManager %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17445;...

HP-UX Security patch : PHSS_17478

The remote host is missing HP-UX Security Patch number PHSS17478 . Security Vulnerability in MC/ServiceGuard & MC/LockManager %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16665;...

HP-UX PHSS_22540 : HP-UX MC/ServiceGuard, Local Denial of Service (DoS) (HPSBUX00129 SSRT071374 rev.2)

s700800 11.X MC/ServiceGuard and SG-OPS Edition A.11.09 : MC/ServiceGuard file and directory permissions are incorrect. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS22540. The text itself is copyright C...

HP-UX Security patch : PHSS_17480

The remote host is missing HP-UX Security Patch number PHSS17480 . Security Vulnerability in MC/ServiceGuard & MC/LockManager %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16662;...

HP-UX PHSS_17483 : s700_800 11.00 MC/LockManager A.11.05 (English) Patch

s700800 11.00 MC/LockManager A.11.05 English Patch : MC/ServiceGuard and MC/LockManager exhibit improper implementation of restricted SAM functionality. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS17483...

HP-UX PHSS_17484 : s700_800 11.00 MC/LockManager A.11.05 (Japanese) Patch

s700800 11.00 MC/LockManager A.11.05 Japanese Patch : MC/ServiceGuard and MC/LockManager exhibit improper implementation of restricted SAM functionality. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS1748...

HP-UX Security patch : PHSS_17482

The remote host is missing HP-UX Security Patch number PHSS17482 . Security Vulnerability in MC/ServiceGuard & MC/LockManager %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16661;...

CVE-2004-1176

CVE-2004-1176 : A buffer underflow in extfs.c of Midnight Commander (mc) prior to 4.5.56 allows remote attackers to cause a denial of service and possibly execute arbitrary code. Documents consistently describe the issue as a remote vulnerability affecting mc with the buffer underflow in the extf...

CVE-2004-1091

CVE-2004-1091 affects Midnight Commander (mc) up to version 4.5.55 and earlier, where a remote user can cause a denial of service by triggering a null pointer dereference. The issue is listed among multiple MC vulnerabilities (with related CVEs) and is discussed in various advisories and vulnerab...

CVE-2004-1174

The CVE-2004-1174 vulnerability affects Midnight Commander (mc) up to and including version 4.5.55, in which direntry.c contains the flaw that allows a denial of service via manipulating non-existing file handles. The description clearly states this is a denial of service condition caused by the ...

CVE-2004-1004

CVE-2004-1004 affects Midnight Commander (mc) up to version 4.5.55 with multiple format string vulnerabilities. The provided connected advisories confirm that various distros release patches (e.g., SUSE SLES9 patch 5011441, Gentoo GLSA 200502-24, Debian DSA 639-1) to fix these issues. The CVE ent...

CVE-2004-1092

CVE-2004-1092 affects Midnight Commander (mc) 4.5.55 and earlier. The issue allows remote Denial-of-Service by causing mc to free unallocated memory (root cause: improper memory handling). The connected sources indicate a fix in Midnight Commander 4.6.0. Remediation: upgrade to MC 4.6.0 or newer ...

CVE-2004-1090

CVE-2004-1090 affects Midnight Commander (mc) up to version 4.5.55, where a remote attacker could trigger a denial of service via a corrupt section header. Multiple issuances (RHSA, DSA, CentOS advisories, Debian) indicate mc updates were released to fix this and related issues (e.g., upgraded to...

[SECURITY] [DSA 639-1] New mc packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 639-1 [email protected] http://www.debian.org/security/ Martin Schulze January 14th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 639-1] New mc packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 639-1 [email protected] http://www.debian.org/security/ Martin Schulze January 14th, 2005 http://www.debian.org/security/faq -...

Debian DSA-639-1 : mc - several vulnerabilities

Andrew V. Samoilov has noticed that several bugfixes which were applied to the source by upstream developers of mc, the midnight commander, a file browser and manager, were not backported to the current version of mc that Debian ships in their stable release. The Common Vulnerabilities and...

Fedora Core 2 : mc-4.6.0-17.fc2 (2004-273)

Security fix for http://bugzilla.redhat.com/bugzilla/showbug.cgi?id=127973. CVE-2004-0494 extfs vfs vulnerability in mc Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...