PT-2004-1004 · Debian+2 · Debian+2

Published 2004-05-05 · Updated 2022-01-19 · CVE-2004-0232

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Midnight Commander versions prior to 4.6.0 gmc (affected versions not specified)

Description The issue involves multiple format string vulnerabilities that may allow attackers to cause a denial of service or execute arbitrary code. Additionally, there are vulnerabilities in the gmc package of Debian GNU/Linux that can lead to violations of confidentiality, integrity, and availability of protected information, with the potential for remote exploitation.

Recommendations For Midnight Commander versions prior to 4.6.0, update to version 4.6.0 or later to resolve the issue. For gmc, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

ALT-PU-2022-1068

ALT-PU-2022-1089

BDU:2015-01363

CVE-2004-0232

DSA-497

Affected Products

Alt Linux

Debian

Midnight Commander

References · 44

• https://osv.dev/vulnerability/CVE-2004-0232 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-01363 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0232 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2004-0232 · Security Note
• https://errata.altlinux.org/ALT-PU-2022-1068 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1175 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1176 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0226 · Security Note
• http://novell.com/linux/security/advisories/2004_12_mc.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-0232 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1092 · Security Note
• http://mandriva.com/security/advisories?name=MDKSA-2004:039 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0231 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1004 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0480 · Security Note