CVE-2003-1023: midnight_commander

EPSS trend

Probability

5.14%

Chance of exploitation in the next 30 days

Percentile

92%

Versus all other CVEs

30-day change

0.00 pp

From 5.14% on 18-09-2026

18-09-202618-10-2026

EPSS score

5.14%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

24 links

rhn.redhat.com/errata/RHSA-2004-034.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/10772Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/archives/fedora-legacy-announce/2004-May/msg00002.htmlVendor AdvisoryX Refsource FEDORA
exchange.xforce.ibmcloud.com/vulnerabilities/13247VDB EntryX Refsource XF
secunia.com/advisories/10716Third Party AdvisoryX Refsource SECUNIA
marc.info?l=bugtraq&m=108118433222764&w=2Mailing ListX Refsource BUGTRAQ
fedoranews.org/updates/FEDORA-2004-058.shtmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/10645Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDKSA-2004:007Vendor AdvisoryX Refsource MANDRAKE
secunia.com/advisories/10823Third Party AdvisoryX Refsource SECUNIA

Show all 24 references

archive.cert.uni-stuttgart.de/bugtraq/2003/09/msg00309.htmlMailing ListX Refsource BUGTRAQ
distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000833Vendor AdvisoryX Refsource CONECTIVA
www.securityfocus.com/bid/8658VDB EntryX Refsource BIDVendor Advisory
www.debian.org/security/2004/dsa-424Vendor AdvisoryX Refsource DEBIAN
rhn.redhat.com/errata/RHSA-2004-035.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/10685Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/11219Third Party AdvisoryX Refsource SECUNIA
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A822VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/9833Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/11296Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/11268Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/11262Third Party AdvisoryX Refsource SECUNIA
security.gentoo.org/glsa/glsa-200403-09.xmlVendor AdvisoryX Refsource GENTOO
security-tracker.debian.org/tracker/CVE-2003-1023Advisory

Related vulnerabilities

CVE-2001-1429midnight_commandermidnight_commander0.44%21y ago24-03-2005 05:00Buffer overflow in mcedit in Midnight Commander 4.5.1 allows local users to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted text file.CVE-2005-0763debianmc+10.47%21y ago29-03-2005 05:00Buffer overflow in Midnight Commander (mc) 4.5.55 and earlier may allow attackers to execute arbitrary code.CVE-2000-1108midnight_commandermidnight_commander0.44%25y ago07-05-2001 04:00cons.saver in Midnight Commander (mc) 4.5.42 and earlier does not properly verify if an output file descriptor is a TTY, which allows local users to corrupt files by creating a symbolic link to the target file, calling mc, and specifying that link as a TTY argument.CVE-2000-1109midnight_commandermidnight_commander0.34%25y ago07-05-2001 04:00Midnight Commander (mc) 4.5.51 and earlier does not properly process malformed directory names when a user opens a directory, which allows other local users to gain privileges by creating directories that contain special characters followed by the commands to be executed.CVE-1999-1337midnight_commandermidnight_commander0.33%23y ago02-04-2003 05:00FTP client in Midnight Commander (mc) before 4.5.11 stores usernames and passwords for visited sites in plaintext in the world-readable history file, which allows other local users to gain privileges.CVE-1999-0480midnight_commandermidnight_commander0.34%26y ago04-02-2000 05:00Local attackers can conduct a denial of service in Midnight Commander 4.x with a symlink attack.

All vulnerabilities inmidnight_commander

CVE-2003-1023: midnight_commander

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References