CVE-2004-1176

EPSS 3.1%
Veröffentlicht 14.04.2005 04:00:00
Zuletzt bearbeitet 16.06.2026 22:07:11
Erkennungen
Login

Buffer underflow in extfs.c in Midnight Commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 9

NVD 47 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Midnight Commander ≫ Midnight Commander Version 4.5.40

Midnight Commander ≫ Midnight Commander Version 4.5.41

Midnight Commander ≫ Midnight Commander Version 4.5.42

Midnight Commander ≫ Midnight Commander Version 4.5.43

Midnight Commander ≫ Midnight Commander Version 4.5.44

Midnight Commander ≫ Midnight Commander Version 4.5.45

Midnight Commander ≫ Midnight Commander Version 4.5.46

Midnight Commander ≫ Midnight Commander Version 4.5.47

Midnight Commander ≫ Midnight Commander Version 4.5.48

Midnight Commander ≫ Midnight Commander Version 4.5.49

Midnight Commander ≫ Midnight Commander Version 4.5.50

Midnight Commander ≫ Midnight Commander Version 4.5.51

Midnight Commander ≫ Midnight Commander Version 4.5.52

Midnight Commander ≫ Midnight Commander Version 4.5.54

Midnight Commander ≫ Midnight Commander Version 4.5.55

Midnight Commander ≫ Midnight Commander Version 4.6

Debian ≫ Debian Linux Version 3.0

Debian ≫ Debian Linux Version 3.0 Edition alpha

Debian ≫ Debian Linux Version 3.0 Edition arm

Debian ≫ Debian Linux Version 3.0 Edition hppa

Debian ≫ Debian Linux Version 3.0 Edition ia-32

Debian ≫ Debian Linux Version 3.0 Edition ia-64

Debian ≫ Debian Linux Version 3.0 Edition m68k

Debian ≫ Debian Linux Version 3.0 Edition mips

Debian ≫ Debian Linux Version 3.0 Edition mipsel

Debian ≫ Debian Linux Version 3.0 Edition ppc

Debian ≫ Debian Linux Version 3.0 Edition s-390

Debian ≫ Debian Linux Version 3.0 Edition sparc

Gentoo ≫ Linux

Redhat ≫ Enterprise Linux Version 2.1 Edition advanced_server

Redhat ≫ Enterprise Linux Version 2.1 Edition advanced_server_ia64

Redhat ≫ Enterprise Linux Version 2.1 Edition workstation

Redhat ≫ Enterprise Linux Version 2.1 Edition workstation_ia64

Redhat ≫ Linux Advanced Workstation Version 2.1 Edition ia64

Redhat ≫ Linux Advanced Workstation Version 2.1 Edition itanium_processor

Suse ≫ Suse Linux Version 8.0

Suse ≫ Suse Linux Version 8.0 Edition i386

Suse ≫ Suse Linux Version 8.1

Suse ≫ Suse Linux Version 8.2

Suse ≫ Suse Linux Version 9.0

Suse ≫ Suse Linux Version 9.0 Edition x86_64

Suse ≫ Suse Linux Version 9.1

Suse ≫ Suse Linux Version 9.2

Turbolinux ≫ Turbolinux Server Version 7.0

Turbolinux ≫ Turbolinux Server Version 8.0

Turbolinux ≫ Turbolinux Workstation Version 7.0

Turbolinux ≫ Turbolinux Workstation Version 8.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	3.1%	0.861

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://www.debian.org/security/2005/dsa-639

Patch

Vendor Advisory

http://www.gentoo.org/security/en/glsa/glsa-200502-24.xml

http://www.redhat.com/support/errata/RHSA-2005-217.html

http://secunia.com/advisories/13863

Patch

Vendor Advisory

http://securitytracker.com/id?1012903

https://exchange.xforce.ibmcloud.com/vulnerabilities/18911

https://nvd.nist.gov/vuln/detail/CVE-2004-1176

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2004-1176

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2004-1176

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2004-1176