PT-2005-1068 · Red Hat+2 · Midnight Commander+1
Publicado
2005-01-22
·
Atualizado
2022-01-19
·
CVE-2004-1174
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
mc versions prior to 4.5.55
Description
The issue affects the Midnight Commander package in Red Hat Enterprise Linux, allowing for remote exploitation that can lead to breaches in confidentiality, integrity, and availability of protected information. Specifically, a denial of service can be caused by manipulating non-existing file handles in the
direntry.c component of Midnight Commander.Recommendations
For versions prior to 4.5.55, update to a version that includes the fix for the denial of service issue in
direntry.c. As a temporary workaround, consider restricting access to the direntry.c component to minimize the risk of exploitation.Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Midnight Commander