NVD Vulnerability Detail
Search Exploit, PoC
CVE-2000-1109
Summary

Midnight Commander (mc) 4.5.51 and earlier does not properly process malformed directory names when a user opens a directory, which allows other local users to gain privileges by creating directories that contain special characters followed by the commands to be executed.

Publication Date Jan. 9, 2001, 2 p.m.
Registration Date Jan. 29, 2021, 6:03 p.m.
Last Update Oct. 10, 2017, 10:29 a.m.
CVSS2.0 : MEDIUM
Score 4.6
Vector AV:L/AC:L/Au:N/C:P/I:P/A:P
攻撃元区分(AV) ローカル
攻撃条件の複雑さ(AC) 低
攻撃前の認証要否(Au) 不要
機密性への影響(C) 低
完全性への影響(I) 低
可用性への影響(A) 低
Get all privileges. いいえ
Get user privileges いいえ
Get other privileges はい
User operation required いいえ
Affected software configurations
Configuration1 or higher or less more than less than
cpe:2.3:a:midnight_commander:midnight_commander:4.5.40:*:*:*:*:*:*:*
cpe:2.3:a:midnight_commander:midnight_commander:4.5.41:*:*:*:*:*:*:*
cpe:2.3:a:midnight_commander:midnight_commander:4.5.42:*:*:*:*:*:*:*
cpe:2.3:a:midnight_commander:midnight_commander:4.5.43:*:*:*:*:*:*:*
cpe:2.3:a:midnight_commander:midnight_commander:4.5.44:*:*:*:*:*:*:*
cpe:2.3:a:midnight_commander:midnight_commander:4.5.45:*:*:*:*:*:*:*
cpe:2.3:a:midnight_commander:midnight_commander:4.5.46:*:*:*:*:*:*:*
cpe:2.3:a:midnight_commander:midnight_commander:4.5.47:*:*:*:*:*:*:*
cpe:2.3:a:midnight_commander:midnight_commander:4.5.48:*:*:*:*:*:*:*
cpe:2.3:a:midnight_commander:midnight_commander:4.5.49:*:*:*:*:*:*:*
cpe:2.3:a:midnight_commander:midnight_commander:4.5.50:*:*:*:*:*:*:*
cpe:2.3:a:midnight_commander:midnight_commander:4.5.51:*:*:*:*:*:*:*
Related information, measures and tools
Common Vulnerabilities List