692 matches found
Fedora Core 1 : mc-4.6.0-17.fc1 (2004-272)
Security fix for http://bugzilla.redhat.com/bugzilla/showbug.cgi?id=127973. CVE-2004-0494 extfs vfs vulnerability in mc Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...
Mandrake Linux Security Advisory : mc (MDKSA-2004:007)
A buffer overflow was discovered in mc's virtual filesystem code. This vulnerability could allow remote attackers to execute arbitrary code during symlink conversion. The updated packages have been patched to correct the problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...
mc
New mc packages are available for Slackware 9.0, 9.1, and -current to fix security issues that These could lead to a denial of service or the execution of arbitrary code as the user running mc. Sites that use mc should upgrade to the new mc package. More details about this issue may be found in t...
CVE-2004-0231
CVE-2004-0231 affects Midnight Commander (mc) prior to 4.6.0. The issue is described as insecure temporary file and directory creation in mc. The provided connected documents confirm this CVE against mc, but do not disclose a specific impact assessment or a concrete remediation within the supplie...
CVE-2004-0226
CVE-2004-0226 affects Midnight Commander (mc) prior to 4.6.0. The issue is described as multiple buffer overflows that may allow a denial of service or arbitrary code execution. Connected documents corroborate MC-related advisories (e.g., GLSA/DSA entries) and reference related CVEs (CVE-2004-023...
CVE-2003-1023
CVE-2003-1023 affects Midnight Commander (mc) 4.6.0 and earlier. It is a stack-based buffer overflow in vfs_s_resolve_symlink (vfs/direntry.c) that could allow a remote attacker to execute arbitrary code during symlink conversion. The issue is documented in multiple advisories (e.g., Debian DSA-4...
Hyperseek 2000 hsx.cgi does not adequately filter user input disclosing directory listings and file contents
Overview iWeb Systems Hyperseek search engine may allow malformed URL requests to access files outside the document root of a vulnerable system. Description A specially crafted URL can disclose the directory listing and files of the target system with read permissions. --- Impact Remote attackers...
[SECURITY] New version of mc released
Package : mc Problem type : local DoS Debian-specific: no Maurycy Prodeus found a problem in cons.saver, a screensaver for the console that is included in the mc package. cons.saver does not check if it is started with a valid stdout, which combined with a bug in its check to see if its argument ...
[SECURITY] New version of mc released
------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman November 25, 2000 - ------------------------------------------------------------------------ Package : mc Problem type : local DoS...
CVE-1999-0435
CVE-1999-0435 affects HP-UX MC/ServiceGuard and MC/LockManager. The root cause is an improper implementation of restricted SAM functionality, enabling local users to gain elevated privileges. What’s affected: HP-UX MC/ServiceGuard and MC/LockManager components, with listed patches PHSS_17581 (and...
hp-ux.mc-serviceguard+mc-lockmanager.txt
Date: Wed, 31 Mar 1999 04:35:03 -0800 PST Subject: Security Bulletins Digest From: [email protected] HP Electronic Support Center To: [email protected] Reply-To: [email protected] Errors-To:...
