PT-2004-1002 · Unknown+2 · Midnight Commander+1

Publicado 2004-05-05 · Atualizado 2022-01-19 · CVE-2004-0226

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Midnight Commander versions prior to 4.6.0

Description The issue concerns multiple buffer overflows that may allow attackers to cause a denial of service or execute arbitrary code. This can lead to disruption of confidentiality, integrity, and availability of protected information. The exploitation of these issues can be done remotely.

Recommendations For Midnight Commander versions prior to 4.6.0, update to version 4.6.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the Midnight Commander until a patch is available.

Correção

Identificadores relacionados

ALT-PU-2022-1068

ALT-PU-2022-1089

BDU:2015-01363

CVE-2004-0226

DSA-497

Produtos afetados

Alt Linux

Midnight Commander

Referências · 44

• https://github.com/MidnightCommander/mc/blob/master/src/vfs/sftpfs/connection.c · Nota
• https://github.com/MidnightCommander/mc/blob/5c1d3c55dd15356ec7d079084d904b7b0fd58d3e/src/vfs/sftpfs/connection.c#L484 · Nota
• http://securityfocus.com/bid/1945 · Nota
• https://osv.dev/vulnerability/CVE-2004-0226 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-01363 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0232 · Nota de Segurança
• https://errata.altlinux.org/ALT-PU-2022-1068 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1175 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1176 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0226 · Nota de Segurança
• http://novell.com/linux/security/advisories/2004_12_mc.html · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1092 · Nota de Segurança
• http://mandriva.com/security/advisories?name=MDKSA-2004:039 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0231 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1004 · Nota de Segurança