CVE-2012-4463

MEDIO 5.1CVE-2012-4463 · Published 10/10/2012 · updated 16/06/2026

In breve

CVE-2012-4463 è una vulnerabilità MEDIO (CVSS 5.1) che riguarda midnight commander (midnight-commander).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.9%, superiore al 79.4% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
midnight commander midnight-commander	`= 4.8.5`	No fix yet

Description

Midnight Commander (mc) 4.8.5 does not properly handle the (1) MC_EXT_SELECTED or (2) MC_EXT_ONLYTAGGED environment variables when multiple files are selected, which allows user-assisted remote attackers to execute arbitrary commands via a crafted file name.

References

openwall.com/lists/oss-security/2012/10/03/4
openwall.com/lists/oss-security/2012/10/03/5
securityfocus.com/bid/55777
bugs.gentoo.org/show_bug.cgi
bugzilla.redhat.com/show_bug.cgi
exchange.xforce.ibmcloud.com/vulnerabilities/79033
midnight-commander.org/ticket/2913

Altre vulnerabilità di midnight commander

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free