Known Vulnerabilities for products from Midnight Commander

Listed below are 20 of the newest known vulnerabilities associated with the vendor "Midnight Commander".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2005-0763 json Buffer overflow in Midnight Commander (mc) 4.5.55 and earlier may allow attackers to execute arbitrary code. Not Provided 2005-05-02 2025-04-03
CVE-2004-1176 json Buffer underflow in extfs.c in Midnight Commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of servic... Not Provided 2005-04-14 2025-04-03
CVE-2004-1175 json fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," possibly ... Not Provided 2005-04-14 2025-04-03
CVE-2004-1174 json direntry.c in Midnight Commander (mc) 4.5.55 and earlier allows attackers to cause a denial of service by "manipulating non-e... Not Provided 2005-04-14 2025-04-03
CVE-2004-1093 json Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service via "use of already freed mem... Not Provided 2005-04-14 2025-04-03
CVE-2004-1092 json Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service by causing mc to free unalloc... Not Provided 2005-04-14 2025-04-03
CVE-2004-1091 json Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service by triggering a null derefere... Not Provided 2005-04-14 2025-04-03
CVE-2004-1090 json Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service via "a corrupt section header... Not Provided 2005-04-14 2025-04-03
CVE-2004-1009 json Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service (infinite loop) via unknown a... Not Provided 2005-04-14 2025-04-03
CVE-2004-1005 json Multiple buffer overflows in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to have an unknown impact. Not Provided 2005-04-14 2025-04-03
CVE-2004-1004 json Multiple format string vulnerabilities in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to have an unknow... Not Provided 2005-04-14 2025-04-03
CVE-2004-0232 json Multiple format string vulnerabilities in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of servi... Not Provided 2004-08-18 2025-04-03
CVE-2004-0231 json Multiple vulnerabilities in Midnight Commander (mc) before 4.6.0, with unknown impact, related to "Insecure temporary file an... Not Provided 2004-08-18 2025-04-03
CVE-2004-0226 json Multiple buffer overflows in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute... Not Provided 2004-08-18 2025-04-03
CVE-2003-1023 json Stack-based buffer overflow in vfs_s_resolve_symlink of vfs/direntry.c for Midnight Commander (mc) 4.6.0 and earlier, and pos... Not Provided 2004-01-20 2025-04-03
CVE-2001-1429 json Buffer overflow in mcedit in Midnight Commander 4.5.1 allows local users to cause a denial of service (segmentation fault) an... Not Provided 2001-11-12 2025-04-03
CVE-2000-1109 json Midnight Commander (mc) 4.5.51 and earlier does not properly process malformed directory names when a user opens a directory,... Not Provided 2001-01-09 2025-04-03
CVE-2000-1108 json cons.saver in Midnight Commander (mc) 4.5.42 and earlier does not properly verify if an output file descriptor is a TTY, whic... Not Provided 2001-01-09 2025-04-03
CVE-1999-1337 json FTP client in Midnight Commander (mc) before 4.5.11 stores usernames and passwords for visited sites in plaintext in the worl... Not Provided 1999-08-01 2025-04-03
CVE-1999-0480 json Local attackers can conduct a denial of service in Midnight Commander 4.x with a symlink attack. Not Provided 1999-04-01 2025-04-03