Secunia Logo
 
CVE Reference: CVE-2004-1175
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2004-1175

Description:
fish.c in midnight commander allows remote attackers execute arbitrary programs via "insecure filename quoting," possibly using shell metacharacters.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/18906

ST
  1012903

SAID
  Secunia Advisory: SA13863

REDHAT
  http://www.redhat.com/support/errata/RHSA-2005-512.html

DEBIAN
  http://www.debian.org/security/2005/dsa-639


Return to the previous page.