PT-2004-1003 · Gmc+3 · Gmc+2

Publicado 2004-05-05 · Atualizado 2022-01-19 · CVE-2004-0231

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Midnight Commander versions prior to 4.6.0 gmc (affected versions not specified)

Description The issue concerns multiple vulnerabilities that can lead to breaches in confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. The vulnerabilities in Midnight Commander are related to "Insecure temporary file and directory creations."

Recommendations For Midnight Commander versions prior to 4.6.0, update to version 4.6.0 or later to resolve the issue. At the moment, there is no information about a newer version that contains a fix for the gmc vulnerability.

Correção

Identificadores relacionados

ALT-PU-2022-1068

ALT-PU-2022-1089

BDU:2015-01363

CVE-2004-0231

DSA-497

Produtos afetados

Alt Linux

Midnight Commander

Gmc

Referências · 44

• https://github.com/MidnightCommander/mc/blob/master/src/vfs/sftpfs/connection.c · Nota
• https://github.com/MidnightCommander/mc/blob/5c1d3c55dd15356ec7d079084d904b7b0fd58d3e/src/vfs/sftpfs/connection.c#L484 · Nota
• http://securityfocus.com/bid/1945 · Nota
• https://bdu.fstec.ru/vul/2015-01363 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0232 · Nota de Segurança
• https://errata.altlinux.org/ALT-PU-2022-1068 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1175 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1176 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0226 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2004-0231 · Aviso do Fabricante
• http://novell.com/linux/security/advisories/2004_12_mc.html · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1092 · Nota de Segurança
• http://mandriva.com/security/advisories?name=MDKSA-2004:039 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0231 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1004 · Nota de Segurança