CVE-2004-0226
published 2004-08-18CVE-2004-0226: Multiple buffer overflows in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code.
PriorityP432critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
3.94%
89.1th percentile
Multiple buffer overflows in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code.
Affected
25 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | mc | < mc 1:4.6.0-4.6.1-pre1-2 (bookworm) | mc 1:4.6.0-4.6.1-pre1-2 (bookworm) |
| gentoo | linux | — | — |
| gentoo | linux | — | — |
| gentoo | linux | — | — |
| gentoo | linux | — | — |
| gentoo | linux | — | — |
| midnight_commander | midnight_commander | — | — |
| midnight_commander | midnight_commander | — | — |
| midnight_commander | midnight_commander | — | — |
| midnight_commander | midnight_commander | — | — |
| midnight_commander | midnight_commander | — | — |
| midnight_commander | midnight_commander | — | — |
| midnight_commander | midnight_commander | — | — |
| midnight_commander | midnight_commander | — | — |
| midnight_commander | midnight_commander | — | — |
| midnight_commander | midnight_commander | — | — |
| midnight_commander | midnight_commander | — | — |
| midnight_commander | midnight_commander | — | — |
| midnight_commander | midnight_commander | — | — |
| midnight_commander | midnight_commander | — | — |
| midnight_commander | midnight_commander | — | — |
| sgi | propack | — | — |
| sgi | propack | — | — |
| slackware | slackware_linux | — | — |
| slackware | slackware_linux | — | — |
CVSS provenance
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
osv10.0CRITICAL
vendor_debian10.0CRITICAL
vendor_redhat10.0CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-qmq2-rfjr-gc2h: Multiple buffer overflows in Midnight Commander (mc) before 4
ghsa_unreviewed·2022-04-29
CVE-2004-0226 [HIGH] GHSA-qmq2-rfjr-gc2h: Multiple buffer overflows in Midnight Commander (mc) before 4
Multiple buffer overflows in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code.
OSV
CVE-2004-0226: Multiple buffer overflows in Midnight Commander (mc) before 4
osv·2004-08-18·CVSS 10.0
CVE-2004-0226 [CRITICAL] CVE-2004-0226: Multiple buffer overflows in Midnight Commander (mc) before 4
Multiple buffer overflows in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code.
Red Hat
security flaw
vendor_redhat·2004-04-29·CVSS 10.0
CVE-2004-0226 [CRITICAL] security flaw
security flaw
Multiple buffer overflows in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code.
Debian
CVE-2004-0226: mc - Multiple buffer overflows in Midnight Commander (mc) before 4.6.0 may allow atta...
vendor_debian·2004·CVSS 10.0
CVE-2004-0226 [CRITICAL] CVE-2004-0226: mc - Multiple buffer overflows in Midnight Commander (mc) before 4.6.0 may allow atta...
Multiple buffer overflows in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code.
Scope: local
bookworm: resolved (fixed in 1:4.6.0-4.6.1-pre1-2)
bullseye: resolved (fixed in 1:4.6.0-4.6.1-pre1-2)
forky: resolved (fixed in 1:4.6.0-4.6.1-pre1-2)
sid: resolved (fixed in 1:4.6.0-4.6.1-pre1-2)
trixie: resolved (fixed in 1:4.6.0-4.6.1-pre1-2)
No detection rules found.
No public exploits indexed.
http://security.gentoo.org/glsa/glsa-200405-21.xmlhttp://www.debian.org/security/2004/dsa-497http://www.mandriva.com/security/advisories?name=MDKSA-2004:039http://www.novell.com/linux/security/advisories/2004_12_mc.htmlhttp://www.redhat.com/support/errata/RHSA-2004-172.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/16016http://security.gentoo.org/glsa/glsa-200405-21.xmlhttp://www.debian.org/security/2004/dsa-497http://www.mandriva.com/security/advisories?name=MDKSA-2004:039http://www.novell.com/linux/security/advisories/2004_12_mc.htmlhttp://www.redhat.com/support/errata/RHSA-2004-172.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/16016
2004-08-18
Published