exploits , vulnerabilities , articles , Midnight Commander Virtual File System Symlink Buffer Overflow Vulnerability

Title	Midnight Commander Virtual File System Symlink Buffer Overflow Vulnerability
Published	2003-09-19-12:00AM
Updated	2004-05-19-03:19PM
Class	Boundary Condition Error
CVE	CAN-2003-1023
Remote	Yes
Local	No
Credit	Discovery of this vulnerability has been credited to Ilya Teterin <alienhard@mail.ru>.
Vulnerable	SGI ProPack 2.4 SGI ProPack 2.3 Midnight Commander Midnight Commander 4.6 OpenPKG OpenPKG Current OpenPKG OpenPKG 1.3 OpenPKG OpenPKG 2.0 RedHat Enterprise Linux AS 2.1 RedHat Enterprise Linux AS 2.1 IA64 RedHat Enterprise Linux AS 3 RedHat Enterprise Linux ES 2.1 RedHat Enterprise Linux ES 2.1 IA64 RedHat Enterprise Linux ES 3 RedHat Enterprise Linux WS 2.1 RedHat Enterprise Linux WS 2.1 IA64 RedHat Enterprise Linux WS 3 RedHat Fedora Core1 RedHat Linux 9.0 i386 S.u.S.E. Linux Personal 8.2 S.u.S.E. Linux Personal 9.0 Midnight Commander Midnight Commander 4.5.55 Conectiva Linux 8.0 Conectiva Linux 9.0 Debian Linux 3.0 Debian Linux 3.0 alpha Debian Linux 3.0 arm Debian Linux 3.0 hppa Debian Linux 3.0 ia32 Debian Linux 3.0 ia64 Debian Linux 3.0 m68k Debian Linux 3.0 mips Debian Linux 3.0 mipsel Debian Linux 3.0 ppc Debian Linux 3.0 s/390 Debian Linux 3.0 sparc MandrakeSoft Linux Mandrake 9.0 MandrakeSoft Linux Mandrake 9.1 MandrakeSoft Linux Mandrake 9.1 ppc MandrakeSoft Linux Mandrake 9.2 MandrakeSoft Linux Mandrake 9.2 amd64 S.u.S.E. Linux 8.0 S.u.S.E. Linux 8.1 Midnight Commander Midnight Commander 4.5.52 Midnight Commander Midnight Commander 4.5.51 SCO OpenLinux Server 3.1.1 SCO OpenLinux Workstation 3.1.1 Gentoo Linux 1.4 _rc3 Gentoo Linux 1.4 _rc2 Gentoo Linux 1.4 _rc1 Gentoo Linux 1.4 Gentoo Linux 1.2 Gentoo Linux 1.1 a Gentoo Linux 0.7 Gentoo Linux 0.5
Not Vulnerable
Code	A demonstration proof-of-concept exploit is in the wild.
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-16 ZABBIX Denial Of Service and SQL Injection Vulnerabilities
2009-12-16 IBM WebSphere Application Server JNDI Remote Information Disclosure Vulnerability
2009-12-16 Horde Application Framework Administration Interface Cross-Site Scripting Vulnerability
2009-12-16 Mozilla Firefox and SeaMonkey MFSA 2009-65 through -71 Multiple Vulnerabilities
2009-12-16 Merkaartor Insecure Temporary File Creation Vulnerability
2009-12-15 TYPO3 Watchdog (aba_watchdog) Unspecified Information Disclosure Vulnerability
2009-12-15 PostgreSQL Index Function Session State Modification Local Privilege Escalation Vulnerability
2009-12-15 PostgreSQL NULL Character CA SSL Certificate Validation Security Bypass Vulnerability
2009-12-15 IBM DB2 prior to 9.5 Fix Pack 5 Multiple Unspecified Security Vulnerabilities
2009-12-15 Sun Ray Server Software Desktop Session Handling Local Security Bypass Vulnerability