| ID |
CVE-2003-1023
|
| Summary |
Stack-based buffer overflow in vfs_s_resolve_symlink of vfs/direntry.c for Midnight Commander (mc) 4.6.0 and earlier, and possibly later versions, allows remote attackers to execute arbitrary code during symlink conversion. |
| References |
|
| Vulnerable Configurations |
-
cpe:2.3:a:midnight_commander:midnight_commander:4.5.52:*:*:*:*:*:*:*
cpe:2.3:a:midnight_commander:midnight_commander:4.5.52:*:*:*:*:*:*:*
-
cpe:2.3:a:midnight_commander:midnight_commander:4.5.55:*:*:*:*:*:*:*
cpe:2.3:a:midnight_commander:midnight_commander:4.5.55:*:*:*:*:*:*:*
-
cpe:2.3:a:midnight_commander:midnight_commander:4.6:*:*:*:*:*:*:*
cpe:2.3:a:midnight_commander:midnight_commander:4.6:*:*:*:*:*:*:*
|
| CVSS |
| Base: | 7.5 (as of 11-10-2017 - 01:29) |
| Impact: | |
| Exploitability: | |
|
| CWE |
NVD-CWE-Other |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| NETWORK |
LOW |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| PARTIAL |
PARTIAL |
PARTIAL |
|
| cvss-vector
via4
|
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
| oval
via4
|
| accepted | 2007-04-25T19:52:56.376-04:00 | | class | vulnerability | | contributors | | name | Jay Beale | | organization | Bastille Linux |
| name | Matt Busby | | organization | The MITRE Corporation |
| name | Thomas R. Jones | | organization | Maitreya Security |
| | description | Stack-based buffer overflow in vfs_s_resolve_symlink of vfs/direntry.c for Midnight Commander (mc) 4.6.0 and earlier, and possibly later versions, allows remote attackers to execute arbitrary code during symlink conversion. | | family | unix | | id | oval:org.mitre.oval:def:822 | | status | accepted | | submitted | 2004-03-21T12:00:00.000-04:00 | | title | Midnight Commander vfs_s_resolve_symlink BO | | version | 36 |
|
| redhat
via4
|
|
| refmap
via4
|
| bid | 8658 | | bugtraq | - 20030919 uninitialized buffer in midnight commander
- 20040405 [OpenPKG-SA-2004.009] OpenPKG Security Advisory (mc)
| | caldera | CSSA-2004-014.0 | | conectiva | CLA-2004:833 | | debian | DSA-424 | | fedora | - FEDORA-2004-058
- FLSA:1224
| | gentoo | GLSA-200403-09 | | mandrake | MDKSA-2004:007 | | secunia | - 10645
- 10685
- 10716
- 10772
- 10823
- 11219
- 11262
- 11268
- 11296
- 9833
| | sgi | - 20040201-01-U
- 20040202-01-U
| | xf | midnight-commander-vfssresolvesymlink-bo(13247) |
|
| Last major update |
11-10-2017 - 01:29 |
| Published |
20-01-2004 - 05:00 |
| Last modified |
11-10-2017 - 01:29 |
