high7.5
CVE-2004-1175
fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," possibly using shell metacharacters.
Impact
fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," possibly using shell metacharacters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Midnight Commander | Midnight Commander | Versions 4.5.40, 4.5.41, 4.5.42, 4.5.43, 4.5.44, 4.5.45 |
| Debian | Debian Linux | Version 3.0 |
| Gentoo | Linux | All versions |
| Redhat | Enterprise Linux | Version 2.1 |
| Redhat | Linux Advanced Workstation | Version 2.1 |
| Suse | Suse Linux | Versions 8.0, 8.1, 8.2, 9.0, 9.1, 9.2 |
| Turbolinux | Turbolinux Server | Versions 7.0, 8.0 |
| Turbolinux | Turbolinux Workstation | Versions 7.0, 8.0 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/13863/
- http://securitytracker.com/id?1012903
- http://www.debian.org/security/2005/dsa-639
- http://www.redhat.com/support/errata/RHSA-2005-512.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18906
- http://secunia.com/advisories/13863/
- http://securitytracker.com/id?1012903
- http://www.debian.org/security/2005/dsa-639
- http://www.redhat.com/support/errata/RHSA-2005-512.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18906