CVE-2000-1109

Midnight Commander (mc) 4.5.51 and earlier does not properly process malformed directory names when a user opens a directory, which allows other local users to gain privileges by creating directories that contain special characters followed by the commands to be executed.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:midnight_commander:midnight_commander:4.5.40:*:*:*:*:*:*:*
cpe:2.3:a:midnight_commander:midnight_commander:4.5.41:*:*:*:*:*:*:*
cpe:2.3:a:midnight_commander:midnight_commander:4.5.42:*:*:*:*:*:*:*
cpe:2.3:a:midnight_commander:midnight_commander:4.5.43:*:*:*:*:*:*:*
cpe:2.3:a:midnight_commander:midnight_commander:4.5.44:*:*:*:*:*:*:*
cpe:2.3:a:midnight_commander:midnight_commander:4.5.45:*:*:*:*:*:*:*
cpe:2.3:a:midnight_commander:midnight_commander:4.5.46:*:*:*:*:*:*:*
cpe:2.3:a:midnight_commander:midnight_commander:4.5.47:*:*:*:*:*:*:*
cpe:2.3:a:midnight_commander:midnight_commander:4.5.48:*:*:*:*:*:*:*
cpe:2.3:a:midnight_commander:midnight_commander:4.5.49:*:*:*:*:*:*:*
cpe:2.3:a:midnight_commander:midnight_commander:4.5.50:*:*:*:*:*:*:*
cpe:2.3:a:midnight_commander:midnight_commander:4.5.51:*:*:*:*:*:*:*

History

20 Nov 2024, 23:34

Type Values Removed Values Added
References () http://archives.neohapsis.com/archives/bugtraq/2000-11/0373.html - Vendor Advisory () http://archives.neohapsis.com/archives/bugtraq/2000-11/0373.html - Vendor Advisory
References () http://www.debian.org/security/2001/dsa-036 - () http://www.debian.org/security/2001/dsa-036 -
References () http://www.novell.com/linux/security/advisories/2001_011_mc.html - () http://www.novell.com/linux/security/advisories/2001_011_mc.html -
References () http://www.securityfocus.com/bid/2016 - Vendor Advisory () http://www.securityfocus.com/bid/2016 - Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/5929 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/5929 -

Information

Published : 2001-01-09 05:00

Updated : 2024-11-20 23:34


NVD link : CVE-2000-1109

Mitre link : CVE-2000-1109

CVE.ORG link : CVE-2000-1109


JSON object : View

Products Affected

midnight_commander

  • midnight_commander