CVE-2004-0226: Buffer Overflow
Published May 5, 2004
·Updated
Multiple buffer overflows in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code.
Affected Software
28 affected components
Midnight commander Midnight commander=4.5.48
Midnight commander Midnight commander=4.5.40
Midnight commander Midnight commander=4.5.43
Midnight commander Midnight commander=4.5.50
Midnight commander Midnight commander=4.5.49
Midnight commander Midnight commander=4.5.52
Midnight commander Midnight commander=4.5.42
SGI ProPack=2.3
Midnight commander Midnight commander=4.5.45
Midnight commander Midnight commander=4.5.55
Midnight commander Midnight commander=4.5.44
Midnight commander Midnight commander=4.5.41
SGI ProPack=2.4
Midnight commander Midnight commander=4.5.46
Midnight commander Midnight commander=4.5.47
Midnight commander Midnight commander=4.5.51
Midnight commander Midnight commander=4.6
Slackware Slackware Linux=9.0
Slackware Slackware Linux=9.1
Gentoo Linux=1.4-rc1
Gentoo Linux=1.4-rc3
Gentoo Linux=0.5
Gentoo Linux=1.1a
Gentoo Linux=1.4
Slackware Slackware Linux
Gentoo Linux=0.7
Gentoo Linux=1.2
Gentoo Linux=1.4-rc2
Remediation
Patch Available
Event History
May 5, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0226?
The severity of CVE-2004-0226 is considered high due to potential denial of service and arbitrary code execution risks.
2
How do I fix CVE-2004-0226?
To fix CVE-2004-0226, you should upgrade to Midnight Commander version 4.6.0 or later.
3
Which versions of Midnight Commander are affected by CVE-2004-0226?
CVE-2004-0226 affects multiple versions of Midnight Commander prior to 4.6.0, specifically versions 4.5.40 to 4.5.55.
4
What type of vulnerability is identified in CVE-2004-0226?
CVE-2004-0226 is classified as a buffer overflow vulnerability.
5
Can CVE-2004-0226 be exploited remotely?
Yes, CVE-2004-0226 can potentially be exploited remotely if the vulnerable software is exposed.