CVE-2004-0232

8 documents7 sources
Severity
5.0MEDIUM
EPSS
1.0%
top 22.66%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Gentoo LinuxMidnight Commander Midnight CommanderSGI Propack+1 more
Timeline
PublishedAug 18
Latest updateApr 29

Description

Multiple format string vulnerabilities in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages5 packages

▶Debianmc< 1:4.6.0-4.6.1-pre1-2+3
▶NVDsgi/propack2.3, 2.4+1
▶NVDgentoo/linux5 versions+4

🔴Vulnerability Details

3
GHSA
GHSA-h73j-wj9f-w749: Multiple format string vulnerabilities in Midnight Commander (mc) before 4↗2022-04-29
▶
OSV
CVE-2004-0232: Multiple format string vulnerabilities in Midnight Commander (mc) before 4↗2004-08-18
▶
CVEList
CVE-2004-0232: Multiple format string vulnerabilities in Midnight Commander (mc) before 4↗2004-05-05
▶

📋Vendor Advisories

2
Red Hat
security flaw↗2004-04-29
▶
Debian
CVE-2004-0232: mc - Multiple format string vulnerabilities in Midnight Commander (mc) before 4.6.0 m...↗2004
▶

💬Community

1
Bugzilla
CVE-2004-0232 security flaw↗2018-08-16
▶