CVE-2004-0232

Description

Multiple format string vulnerabilities in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code.

Affected products

• gentoo / linux1.4 – 1.4
• gentoo / linux1.4 – 1.4
• gentoo / linux0.5 – 0.5
• gentoo / linux0.7 – 0.7
• gentoo / linux1.1a – 1.1a
• gentoo / linux1.2 – 1.2
• gentoo / linux1.4 – 1.4
• gentoo / linux1.4 – 1.4
• midnight_commander / midnight_commander4.5.48 – 4.5.48
• midnight_commander / midnight_commander4.5.49 – 4.5.49
• midnight_commander / midnight_commander4.5.50 – 4.5.50
• midnight_commander / midnight_commander4.5.51 – 4.5.51
• midnight_commander / midnight_commander4.5.52 – 4.5.52
• midnight_commander / midnight_commander4.5.55 – 4.5.55
• midnight_commander / midnight_commander4.6 – 4.6
• midnight_commander / midnight_commander4.5.40 – 4.5.40
• midnight_commander / midnight_commander4.5.41 – 4.5.41
• midnight_commander / midnight_commander4.5.42 – 4.5.42
• midnight_commander / midnight_commander4.5.43 – 4.5.43
• midnight_commander / midnight_commander4.5.44 – 4.5.44
• midnight_commander / midnight_commander4.5.45 – 4.5.45
• midnight_commander / midnight_commander4.5.46 – 4.5.46
• midnight_commander / midnight_commander4.5.47 – 4.5.47
• sgi / propack2.4 – 2.4
• sgi / propack2.3 – 2.3
• slackware / slackware_linux
• slackware / slackware_linux9.0 – 9.0
• slackware / slackware_linux9.1 – 9.1

References

• VENDOR_ADVISORYhttp://www.novell.com/linux/security/advisories/2004_12_mc.html
• MISChttp://security.gentoo.org/glsa/glsa-200405-21.xml
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/16021
• VENDOR_ADVISORYhttp://www.mandriva.com/security/advisories?name=MDKSA-2004:039
• VENDOR_ADVISORYhttp://www.debian.org/security/2004/dsa-497
• MISChttp://www.redhat.com/support/errata/RHSA-2004-172.html