CVEvulnerability

CVE-2004-1175

7.5 HIGH Published 2005-04-14 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-04-14
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," possibly using shell metacharacters.

Affected configurations

• midnight commander midnight commander 4.5.40 • midnight commander midnight commander 4.5.41 • midnight commander midnight commander 4.5.42 • midnight commander midnight commander 4.5.43 • midnight commander midnight commander 4.5.44 • midnight commander midnight commander 4.5.45 • midnight commander midnight commander 4.5.46 • midnight commander midnight commander 4.5.47 • midnight commander midnight commander 4.5.48 • midnight commander midnight commander 4.5.49 • midnight commander midnight commander 4.5.50 • midnight commander midnight commander 4.5.51 • midnight commander midnight commander 4.5.52 • midnight commander midnight commander 4.5.54 • midnight commander midnight commander 4.5.55 • midnight commander midnight commander 4.6 • debian debian linux 3.0 • gentoo linux • redhat enterprise linux 2.1 • redhat linux advanced workstation 2.1 • suse suse linux 8.0 • suse suse linux 8.1 • suse suse linux 8.2 • suse suse linux 9.0 • suse suse linux 9.1 • suse suse linux 9.2 • turbolinux turbolinux server 7.0 • turbolinux turbolinux server 8.0 • turbolinux turbolinux workstation 7.0 • turbolinux turbolinux workstation 8.0

References