CVE-1999-0480: Low severity Midnight commander Midnight commander vulnerability
Local attackers can conduct a denial of service in Midnight Commander 4.x with a symlink attack.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Midnight Commander 4.xfrom your environment.If Midnight Commander (mc) is installed and not required, uninstall it to eliminate the local symlink-based denial-of-service vector.
- Compensating control
Restrict local user access to the system to trusted accounts only (disable or remove untrusted/local user accounts, limit shell access) so that unprivileged local attackers cannot run Midnight Commander or exploit the symlink attack.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0480?
CVE-1999-0480 is considered a low-severity vulnerability as it allows local attackers to conduct a denial of service.
How do I fix CVE-1999-0480?
To mitigate CVE-1999-0480, users should upgrade to a version of Midnight Commander that has addressed this vulnerability.
Who is affected by CVE-1999-0480?
CVE-1999-0480 affects users of Midnight Commander version 4.x.
What type of attack is associated with CVE-1999-0480?
CVE-1999-0480 is associated with a symlink attack that can lead to denial of service.
Can CVE-1999-0480 be exploited remotely?
No, CVE-1999-0480 can only be exploited by local attackers with access to the system.