|
Vulnerability Assessment & Network Security Forums |
|||||||||
If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery. Home >> Browse Vulnerability Assessment Database >> Gentoo Local Security Checks >> [GLSA-200405-21] Midnight Commander: Multiple vulnerabilities Vulnerability Assessment Details
|
[GLSA-200405-21] Midnight Commander: Multiple vulnerabilities |
||
Midnight Commander: Multiple vulnerabilities Detailed Explanation for this Vulnerability Assessment The remote host is affected by the vulnerability described in GLSA-200405-21 (Midnight Commander: Multiple vulnerabilities) Numerous security issues have been discovered in Midnight Commander, including several buffer overflow vulnerabilities, multiple vulnerabilities in the handling of temporary file and directory creation, and multiple format string vulnerabilities. Impact The buffer overflows and format string vulnerabilites may permit attackers to cause a denial of service or execute arbitrary code with permissions of the user running MC. The insecure creation of temporary files and directories could lead to a privilege escalation, including root rights, for a local attacker. Workaround There is no known workaround at this time. All users are advised to upgrade to version 4.6.0-r7 or higher of Midnight Commander. References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0226 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0231 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0232 Solution: All Midnight Commander users should upgrade to the latest stable version: # emerge sync # emerge -pv ">=app-misc/mc-4.6.0-r7 # emerge ">=app-misc/mc-4.6.0-r7" Network Security Threat Level: High Networks Security ID: Vulnerability Assessment Copyright: (C) 2005 Michel Arboi |
||
Cables, Connectors |
Dell Optiplex 5060 SFF 8th Gen Core i7 3.2GHZ 16GB 512GB Win 11 Pro
$249.00
Lenovo IdeaCentre 3 07IRB8 Desktop Intel Core i5-13400 16GB 512GB SSD W11H
$429.99
Intel - Core i9-13900K 13th Gen 24 cores 8 P-cores + 16 E-cores 36M Cache, 3 ...
$689.99
Intel - Core i7-13700K 13th Gen 16 cores 8 P-cores + 8 E-cores 30M Cache, 3.4...
$489.99
AMD Ryzen 7 7800X3D 8-Core - 16-Thread 4.2 GHz (5.0 GHz Max Boost) Socket A...
$339.95
Apple Mac Pro Processor Tray 5,1 2010 2012 2.4ghz 8 core
$79.99
Intel Core i5-6500T SR2L8 2.50GHz Desktop Processor Socket 1151 Quad Core CPU
$22.99
Intel - Core i9-12900K Desktop Processor 16 (8P+8E) Cores up to 5.2 GHz Unloc...
$619.99
Dell optiplex 7050 Intel core I7-7700 3.6 GHz 8 GB ram No HDD/No OS
$89.99
Dell 9020 Optiplex Micro-Intel Core i5 - 1TB SSD 8GB RAM Window 11
$129.49
|
||
No Discussions have been posted on this vulnerability. |