CVE-2000-1108: Medium severity Midnight commander Midnight commander vulnerability
cons.saver in Midnight Commander (mc) 4.5.42 and earlier does not properly verify if an output file descriptor is a TTY, which allows local users to corrupt files by creating a symbolic link to the target file, calling mc, and specifying that link as a TTY argument.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2000-1108?
CVE-2000-1108 is considered a moderate severity vulnerability due to its potential for local file corruption.
How do I fix CVE-2000-1108?
To fix CVE-2000-1108, update your Midnight Commander to a version later than 4.5.42 that addresses this vulnerability.
Who is affected by CVE-2000-1108?
Users running Midnight Commander versions 4.5.42 or earlier are affected by CVE-2000-1108.
What type of attack does CVE-2000-1108 facilitate?
CVE-2000-1108 facilitates local users to corrupt files by exploiting symlink attacks in the Midnight Commander application.
Is CVE-2000-1108 a remote or local vulnerability?
CVE-2000-1108 is a local vulnerability, meaning it can only be exploited by users with local access to the system.