CVE:CVE-2004-0232
CNNVD:CNNVD-200408-170
Midnight Commander是一款强大的GNU/LINUX系统的文件管理器。
Midnight Commander存在多个未明漏洞，远程攻击者可以利用这些漏洞进行缓冲区溢出，进行符号连接攻击及拒绝服务等攻击。
Midnight Commander存在缓冲区溢出，不安全建立文件和目录及格式串问题，目前没有详细漏洞细节提供。
solution:Upgrade midnight_commander midnight_commander to a higher version than 4.5.40,4.5.41,4.5.42,4.5.43,4.5.44,4.5.45,4.5.46,4.5.47,4.5.48,4.5.49,4.5.50,4.5.51,4.5.52,4.5.55,4.6,and avoid the version 4.5.40,4.5.41,4.5.42,4.5.43,4.5.44,4.5.45,4.5.46,4.5.47,4.5.48,4.5.49,4.5.50,4.5.51,4.5.52,4.5.55,4.6; Upgrade sgi propack to a higher version than 2.3,2.4,and avoid the version 2.3,2.4; Upgrade gentoo linux to a higher version than 0.5,0.7,1.1a,1.2,1.4,1.4:rc1,1.4:rc2,1.4:rc3,and avoid the version 0.5,0.7,1.1a,1.2,1.4,1.4:rc1,1.4:rc2,1.4:rc3; Upgrade slackware slackware_linux to a higher version than *,9.0,9.1,and avoid the version 9.0,9.1