952 matches found
CVE-2004-0231
CVE-2004-0231 affects Midnight Commander (mc) prior to 4.6.0. The issue is described as insecure temporary file and directory creation in mc. The provided connected documents confirm this CVE against mc, but do not disclose a specific impact assessment or a concrete remediation within the supplie...
CVE-2004-0231: Undefined Security Weakness
Multiple vulnerabilities in Midnight Commander mc before 4.6.0, with unknown impact, related to "Insecure temporary file and directory creations."...
CVE-2004-0232: Undefined Security Weakness
Multiple format string vulnerabilities in Midnight Commander mc before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code...
CVE-2003-1023
CVE-2003-1023 affects Midnight Commander (mc) 4.6.0 and earlier. It is a stack-based buffer overflow in vfs_s_resolve_symlink (vfs/direntry.c) that could allow a remote attacker to execute arbitrary code during symlink conversion. The issue is documented in multiple advisories (e.g., Debian DSA-4...
Hyperseek 2000 hsx.cgi does not adequately filter user input disclosing directory listings and file contents
Overview iWeb Systems Hyperseek search engine may allow malformed URL requests to access files outside the document root of a vulnerable system. Description A specially crafted URL can disclose the directory listing and files of the target system with read permissions. --- Impact Remote attackers...
CVE-2000-1109: Undefined Security Weakness
Midnight Commander mc 4.5.51 and earlier does not properly process malformed directory names when a user opens a directory, which allows other local users to gain privileges by creating directories that contain special characters followed by the commands to be executed...
[SECURITY] New version of mc released
Package : mc Problem type : local DoS Debian-specific: no Maurycy Prodeus found a problem in cons.saver, a screensaver for the console that is included in the mc package. cons.saver does not check if it is started with a valid stdout, which combined with a bug in its check to see if its argument ...
[SECURITY] New version of mc released
------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman November 25, 2000 - ------------------------------------------------------------------------ Package : mc Problem type : local DoS...
CVE-1999-0435
CVE-1999-0435 affects HP-UX MC/ServiceGuard and MC/LockManager. The root cause is an improper implementation of restricted SAM functionality, enabling local users to gain elevated privileges. What’s affected: HP-UX MC/ServiceGuard and MC/LockManager components, with listed patches PHSS_17581 (and...
CVE-1999-0435: Undefined Security Weakness
MC/ServiceGuard and MC/LockManager in HP-UX allows local users to gain privileges through SAM...
hp-ux.mc-serviceguard+mc-lockmanager.txt
Date: Wed, 31 Mar 1999 04:35:03 -0800 PST Subject: Security Bulletins Digest From: [email protected] HP Electronic Support Center To: [email protected] Reply-To: [email protected] Errors-To:...