PT-2004-1004 · Debian+2 · Debian+2

Publicado 2004-05-05 · Atualizado 2022-01-19 · CVE-2004-0232

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Midnight Commander versions prior to 4.6.0 gmc (affected versions not specified)

Description The issue involves multiple format string vulnerabilities that may allow attackers to cause a denial of service or execute arbitrary code. Additionally, there are vulnerabilities in the gmc package of Debian GNU/Linux that can lead to violations of confidentiality, integrity, and availability of protected information, with the potential for remote exploitation.

Recommendations For Midnight Commander versions prior to 4.6.0, update to version 4.6.0 or later to resolve the issue. For gmc, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

ALT-PU-2022-1068

ALT-PU-2022-1089

BDU:2015-01363

CVE-2004-0232

DSA-497

Produtos afetados

Alt Linux

Debian

Midnight Commander

Referências · 44

• https://github.com/MidnightCommander/mc/blob/master/src/vfs/sftpfs/connection.c · Nota
• https://github.com/MidnightCommander/mc/blob/5c1d3c55dd15356ec7d079084d904b7b0fd58d3e/src/vfs/sftpfs/connection.c#L484 · Nota
• http://securityfocus.com/bid/1945 · Nota
• https://osv.dev/vulnerability/CVE-2004-0232 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-01363 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0232 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2004-0232 · Nota de Segurança
• https://errata.altlinux.org/ALT-PU-2022-1068 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1175 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1176 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0226 · Nota de Segurança
• http://novell.com/linux/security/advisories/2004_12_mc.html · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-0232 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1092 · Nota de Segurança
• http://mandriva.com/security/advisories?name=MDKSA-2004:039 · Aviso do Fabricante