CVE-2000-1109: Medium severity Midnight commander Midnight commander vulnerability
Midnight Commander (mc) 4.5.51 and earlier does not properly process malformed directory names when a user opens a directory, which allows other local users to gain privileges by creating directories that contain special characters followed by the commands to be executed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2000-1109?
CVE-2000-1109 is considered a medium severity vulnerability due to its potential for privilege escalation among local users.
How do I fix CVE-2000-1109?
To fix CVE-2000-1109, upgrade to a version of Midnight Commander later than 4.5.51 where the vulnerability is patched.
What impact does CVE-2000-1109 have on affected systems?
CVE-2000-1109 allows local users to gain elevated privileges by exploiting malformed directory names.
Which versions of Midnight Commander are affected by CVE-2000-1109?
Midnight Commander versions 4.5.51 and earlier are vulnerable to CVE-2000-1109.
Can CVE-2000-1109 be exploited remotely?
CVE-2000-1109 cannot be exploited remotely as it requires local access to the system.