- EPSS 0.89%
- Veröffentlicht 14.04.2005 04:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service by causing mc to free unallocated memory.
- EPSS 1.23%
- Veröffentlicht 14.04.2005 04:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service via "use of already freed memory."
- EPSS 1.32%
- Veröffentlicht 14.04.2005 04:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
direntry.c in Midnight Commander (mc) 4.5.55 and earlier allows attackers to cause a denial of service by "manipulating non-existing file handles."
CVE-2004-1175
- EPSS 1.11%
- Veröffentlicht 14.04.2005 04:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," possibly using shell metacharacters.
CVE-2004-1176
- EPSS 2.25%
- Veröffentlicht 14.04.2005 04:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
Buffer underflow in extfs.c in Midnight Commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code.
CVE-2004-1235
- EPSS 0.08%
- Veröffentlicht 14.04.2005 04:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.429-rc2 and 2.6 through 2.6.10 allows local users to execute arbitrary code by manipulating the VMA descriptor.
CVE-2004-1237
- EPSS 0.06%
- Veröffentlicht 14.04.2005 04:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
Unknown vulnerability in the system call filtering code in the audit subsystem for Red Hat Enterprise Linux 3 allows local users to cause a denial of service (system crash) via unknown vectors.
CVE-2005-0003
- EPSS 0.08%
- Veröffentlicht 14.04.2005 04:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
The 64 bit ELF support in Linux kernel 2.6 before 2.6.10, on 64-bit architectures, does not properly check for overlapping VMA (virtual memory address) allocations, which allows local users to cause a denial of service (system crash) or execute arbit...
CVE-2005-0750
- EPSS 0.17%
- Veröffentlicht 27.03.2005 05:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
The bluez_sock_create function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1 and 2.6 through 2.6.11.5 allows local users to gain privileges via (1) socket or (2) socketpair call with a negative protocol value.
- EPSS 16.68%
- Veröffentlicht 15.03.2005 05:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
Unknown vulnerability in the PPP driver for the Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) via a pppd client.