CVE-2004-0232
published 2004-08-18CVE-2004-0232: Multiple format string vulnerabilities in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code.
PriorityP422medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
2.94%
85.4th percentile
Multiple format string vulnerabilities in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code.
Affected
25 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | mc | < mc 1:4.6.0-4.6.1-pre1-2 (bookworm) | mc 1:4.6.0-4.6.1-pre1-2 (bookworm) |
| gentoo | linux | — | — |
| gentoo | linux | — | — |
| gentoo | linux | — | — |
| gentoo | linux | — | — |
| gentoo | linux | — | — |
| midnight_commander | midnight_commander | — | — |
| midnight_commander | midnight_commander | — | — |
| midnight_commander | midnight_commander | — | — |
| midnight_commander | midnight_commander | — | — |
| midnight_commander | midnight_commander | — | — |
| midnight_commander | midnight_commander | — | — |
| midnight_commander | midnight_commander | — | — |
| midnight_commander | midnight_commander | — | — |
| midnight_commander | midnight_commander | — | — |
| midnight_commander | midnight_commander | — | — |
| midnight_commander | midnight_commander | — | — |
| midnight_commander | midnight_commander | — | — |
| midnight_commander | midnight_commander | — | — |
| midnight_commander | midnight_commander | — | — |
| midnight_commander | midnight_commander | — | — |
| sgi | propack | — | — |
| sgi | propack | — | — |
| slackware | slackware_linux | — | — |
| slackware | slackware_linux | — | — |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv5.0MEDIUM
vendor_debian5.0MEDIUM
vendor_redhat5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
security flaw
vendor_redhat·2004-04-29·CVSS 5.0
CVE-2004-0232 [MEDIUM] security flaw
security flaw
Multiple format string vulnerabilities in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code.
Debian
CVE-2004-0232: mc - Multiple format string vulnerabilities in Midnight Commander (mc) before 4.6.0 m...
vendor_debian·2004·CVSS 5.0
CVE-2004-0232 [MEDIUM] CVE-2004-0232: mc - Multiple format string vulnerabilities in Midnight Commander (mc) before 4.6.0 m...
Multiple format string vulnerabilities in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code.
Scope: local
bookworm: resolved (fixed in 1:4.6.0-4.6.1-pre1-2)
bullseye: resolved (fixed in 1:4.6.0-4.6.1-pre1-2)
forky: resolved (fixed in 1:4.6.0-4.6.1-pre1-2)
sid: resolved (fixed in 1:4.6.0-4.6.1-pre1-2)
trixie: resolved (fixed in 1:4.6.0-4.6.1-pre1-2)
GHSA
GHSA-h73j-wj9f-w749: Multiple format string vulnerabilities in Midnight Commander (mc) before 4
ghsa_unreviewed·2022-04-29
CVE-2004-0232 [MEDIUM] GHSA-h73j-wj9f-w749: Multiple format string vulnerabilities in Midnight Commander (mc) before 4
Multiple format string vulnerabilities in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code.
OSV
CVE-2004-0232: Multiple format string vulnerabilities in Midnight Commander (mc) before 4
osv·2004-08-18·CVSS 5.0
CVE-2004-0232 [MEDIUM] CVE-2004-0232: Multiple format string vulnerabilities in Midnight Commander (mc) before 4
Multiple format string vulnerabilities in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code.
No detection rules found.
No public exploits indexed.
http://security.gentoo.org/glsa/glsa-200405-21.xmlhttp://www.debian.org/security/2004/dsa-497http://www.mandriva.com/security/advisories?name=MDKSA-2004:039http://www.novell.com/linux/security/advisories/2004_12_mc.htmlhttp://www.redhat.com/support/errata/RHSA-2004-172.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/16021http://security.gentoo.org/glsa/glsa-200405-21.xmlhttp://www.debian.org/security/2004/dsa-497http://www.mandriva.com/security/advisories?name=MDKSA-2004:039http://www.novell.com/linux/security/advisories/2004_12_mc.htmlhttp://www.redhat.com/support/errata/RHSA-2004-172.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/16021
2004-08-18
Published