818 matches found
Debian DSA-639-1 : mc - several vulnerabilities
Andrew V. Samoilov has noticed that several bugfixes which were applied to the source by upstream developers of mc, the midnight commander, a file browser and manager, were not backported to the current version of mc that Debian ships in their stable release. The Common Vulnerabilities and...
Fedora Core 2 : mc-4.6.0-17.fc2 (2004-273)
Security fix for http://bugzilla.redhat.com/bugzilla/showbug.cgi?id=127973. CVE-2004-0494 extfs vfs vulnerability in mc Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...
Fedora Core 1 : mc-4.6.0-17.fc1 (2004-272)
Security fix for http://bugzilla.redhat.com/bugzilla/showbug.cgi?id=127973. CVE-2004-0494 extfs vfs vulnerability in mc Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...
Mandrake Linux Security Advisory : mc (MDKSA-2004:007)
A buffer overflow was discovered in mc's virtual filesystem code. This vulnerability could allow remote attackers to execute arbitrary code during symlink conversion. The updated packages have been patched to correct the problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...
mc
New mc packages are available for Slackware 9.0, 9.1, and -current to fix security issues that These could lead to a denial of service or the execution of arbitrary code as the user running mc. Sites that use mc should upgrade to the new mc package. More details about this issue may be found in t...
CVE-2004-0231
CVE-2004-0231 affects Midnight Commander (mc) prior to 4.6.0. The issue is described as insecure temporary file and directory creation in mc. The provided connected documents confirm this CVE against mc, but do not disclose a specific impact assessment or a concrete remediation within the supplie...
CVE-2004-0226
CVE-2004-0226 affects Midnight Commander (mc) prior to 4.6.0. The issue is described as multiple buffer overflows that may allow a denial of service or arbitrary code execution. Connected documents corroborate MC-related advisories (e.g., GLSA/DSA entries) and reference related CVEs (CVE-2004-023...
CVE-2004-0232: Undefined Security Weakness
Multiple format string vulnerabilities in Midnight Commander mc before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code...
CVE-2004-0231: Undefined Security Weakness
Multiple vulnerabilities in Midnight Commander mc before 4.6.0, with unknown impact, related to "Insecure temporary file and directory creations."...
CVE-2003-1023
CVE-2003-1023 affects Midnight Commander (mc) 4.6.0 and earlier. It is a stack-based buffer overflow in vfs_s_resolve_symlink (vfs/direntry.c) that could allow a remote attacker to execute arbitrary code during symlink conversion. The issue is documented in multiple advisories (e.g., Debian DSA-4...
Hyperseek 2000 hsx.cgi does not adequately filter user input disclosing directory listings and file contents
Overview iWeb Systems Hyperseek search engine may allow malformed URL requests to access files outside the document root of a vulnerable system. Description A specially crafted URL can disclose the directory listing and files of the target system with read permissions. --- Impact Remote attackers...
CVE-2000-1109: Undefined Security Weakness
Midnight Commander mc 4.5.51 and earlier does not properly process malformed directory names when a user opens a directory, which allows other local users to gain privileges by creating directories that contain special characters followed by the commands to be executed...
[SECURITY] New version of mc released
Package : mc Problem type : local DoS Debian-specific: no Maurycy Prodeus found a problem in cons.saver, a screensaver for the console that is included in the mc package. cons.saver does not check if it is started with a valid stdout, which combined with a bug in its check to see if its argument ...
[SECURITY] New version of mc released
------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman November 25, 2000 - ------------------------------------------------------------------------ Package : mc Problem type : local DoS...
CVE-1999-0435
CVE-1999-0435 affects HP-UX MC/ServiceGuard and MC/LockManager. The root cause is an improper implementation of restricted SAM functionality, enabling local users to gain elevated privileges. What’s affected: HP-UX MC/ServiceGuard and MC/LockManager components, with listed patches PHSS_17581 (and...
CVE-1999-0435: Undefined Security Weakness
MC/ServiceGuard and MC/LockManager in HP-UX allows local users to gain privileges through SAM...
hp-ux.mc-serviceguard+mc-lockmanager.txt
Date: Wed, 31 Mar 1999 04:35:03 -0800 PST Subject: Security Bulletins Digest From: [email protected] HP Electronic Support Center To: [email protected] Reply-To: [email protected] Errors-To:...
