PT-2004-1003 · Gmc+3 · Gmc+2

Published 2004-05-05 · Updated 2022-01-19 · CVE-2004-0231

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Midnight Commander versions prior to 4.6.0 gmc (affected versions not specified)

Description The issue concerns multiple vulnerabilities that can lead to breaches in confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. The vulnerabilities in Midnight Commander are related to "Insecure temporary file and directory creations."

Recommendations For Midnight Commander versions prior to 4.6.0, update to version 4.6.0 or later to resolve the issue. At the moment, there is no information about a newer version that contains a fix for the gmc vulnerability.

Fix

Related Identifiers

ALT-PU-2022-1068

ALT-PU-2022-1089

BDU:2015-01363

CVE-2004-0231

DSA-497

Affected Products

Alt Linux

Midnight Commander

Gmc

References · 44

• https://bdu.fstec.ru/vul/2015-01363 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0232 · Security Note
• https://errata.altlinux.org/ALT-PU-2022-1068 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1175 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1176 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0226 · Security Note
• https://osv.dev/vulnerability/CVE-2004-0231 · Vendor Advisory
• http://novell.com/linux/security/advisories/2004_12_mc.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1092 · Security Note
• http://mandriva.com/security/advisories?name=MDKSA-2004:039 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0231 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1004 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0480 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1009 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1023 · Security Note