Approved changes feed: RSS · Atom

cpe:2.3:a:midnight_commander:midnight_commander:4.5.42:*:*:*:*:*:*:*

part: a version: 4.5.42 update: *

VendorMidnight Commander (c25c8543-4807-59aa-9bfc-47880d515884)
ProductMidnight Commander (7b2877b9-228c-5abc-9283-aeec9ecdb7b8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/midnightcommander/mc purl2cpe 2026-06-01 10:12:35.555648
pkg:golang/github.com/midnightcommander/mc purl2cpe 2026-06-01 10:12:35.555651

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2004-1176 vulnerable 2026-06-08 04:47:53.211003 Details available
Buffer underflow in extfs.c in Midnight Commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code.
Published: 2005-01-22T05:00:00.000Z
Updated: 2024-08-08T00:39:00.909Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1175 vulnerable 2026-06-08 04:47:53.209556 Details available
fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," possibly using shell metacharacters.
Published: 2005-01-22T05:00:00.000Z
Updated: 2024-08-08T00:39:00.943Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1174 vulnerable 2026-06-08 04:47:53.203740 Details available
direntry.c in Midnight Commander (mc) 4.5.55 and earlier allows attackers to cause a denial of service by "manipulating non-existing file handles."
Published: 2005-01-22T05:00:00.000Z
Updated: 2024-08-08T00:39:00.873Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1093 vulnerable 2026-06-08 04:47:52.880457 Details available
Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service via "use of already freed memory."
Published: 2005-01-22T05:00:00.000Z
Updated: 2024-08-08T00:39:00.854Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1092 vulnerable 2026-06-08 04:47:52.879255 Details available
Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service by causing mc to free unallocated memory.
Published: 2005-01-22T05:00:00.000Z
Updated: 2024-08-08T00:39:00.814Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1091 vulnerable 2026-06-08 04:47:52.877816 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1090 vulnerable 2026-06-08 04:47:52.876531 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1009 vulnerable 2026-06-08 04:47:52.298013 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1005 vulnerable 2026-06-08 04:47:52.263731 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1004 vulnerable 2026-06-08 04:47:52.260087 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0232 vulnerable 2026-06-08 04:47:49.122392 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0231 vulnerable 2026-06-08 04:47:49.121454 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0226 vulnerable 2026-06-08 04:47:49.046548 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-1109 vulnerable 2026-06-08 04:45:19.285208 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-1108 vulnerable 2026-06-08 04:45:19.283459 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.