PT-2004-1002 · Unknown+2 · Midnight Commander+1

Published 2004-05-05 · Updated 2022-01-19 · CVE-2004-0226

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Midnight Commander versions prior to 4.6.0

Description The issue concerns multiple buffer overflows that may allow attackers to cause a denial of service or execute arbitrary code. This can lead to disruption of confidentiality, integrity, and availability of protected information. The exploitation of these issues can be done remotely.

Recommendations For Midnight Commander versions prior to 4.6.0, update to version 4.6.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the Midnight Commander until a patch is available.

Fix

Related Identifiers

ALT-PU-2022-1068

ALT-PU-2022-1089

BDU:2015-01363

CVE-2004-0226

DSA-497

Affected Products

Alt Linux

Midnight Commander

References · 44

• https://osv.dev/vulnerability/CVE-2004-0226 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-01363 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0232 · Security Note
• https://errata.altlinux.org/ALT-PU-2022-1068 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1175 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1176 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0226 · Security Note
• http://novell.com/linux/security/advisories/2004_12_mc.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1092 · Security Note
• http://mandriva.com/security/advisories?name=MDKSA-2004:039 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0231 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1004 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0480 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1009 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1023 · Security Note