CVE-2004-1175

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," possibly using shell metacharacters.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/13863/Patch, Vendor Advisory
http://securitytracker.com/id?1012903
http://www.debian.org/security/2005/dsa-639Patch, Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-512.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/18906
http://secunia.com/advisories/13863/Patch, Vendor Advisory
http://securitytracker.com/id?1012903
http://www.debian.org/security/2005/dsa-639Patch, Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-512.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/18906

Timeline

Published: Apr 14, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-11767.5Buffer underflow in extfs.c in Midnight Commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service and possibly CVE-2004-11774.3Cross-site scripting (XSS) vulnerability in the driver script in mailman before 2.1.5 allows remote attackers to inject arbitrary web script CVE-2004-11792.1The debstd script in debmake 3.6.x before 3.6.10 and 3.7.x before 3.7.7 allows local users to overwrite arbitrary files via a symlink attack CVE-2004-11805.0Unknown vulnerability in the rwho daemon (rwhod) before 0.17, on little endian architectures, allows remote attackers to cause a denial of s CVE-2004-11814.6htmlheadline before 21.8 allows local users to overwrite arbitrary files via a symlink attack on temporary files.CVE-2004-11827.5hfaxd in HylaFAX before 4.2.1, when installed with a "weak" hosts.hfaxd file, allows remote attackers to authenticate and bypass intended ac CVE-2004-11835.1Integer overflow in the tiffdump utility for libtiff 3.7.1 and earlier allows remote attackers to cause a denial of service (application cra CVE-2004-11844.6The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters.CVE-2004-11857.5Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames CVE-2004-11865.0Multiple buffer overflows in enscript 1.6.3 allow remote attackers or local users to cause a denial of service (application crash).CVE-2004-118710.0Heap-based buffer overflow in the pnm_get_chunk function for xine 0.99.2, and other packages such as MPlayer that use the same code, allows CVE-2004-118810.0The pnm_get_chunk function in xine 0.99.2 and earlier, and other packages such as MPlayer that use the same code, does not properly verify t