VDB
CVE-2004-1175
CVE-2004-1175
PUBLISHED
Reported by mitre · Published January 22, 2005
fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," possibly using shell metacharacters.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| n/a | n/a | *, *, n/a |
Timeline
- Jan 22, 2005 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 22, 2022 EPSS Score
- Jul 15, 2022 EPSS Score
- Sep 6, 2022 EPSS Score
- Dec 22, 2022 EPSS Score
- Feb 13, 2023 EPSS Score
- Apr 7, 2023 EPSS Score
- May 31, 2023 EPSS Score
- Jul 23, 2023 EPSS Score
- Sep 14, 2023 EPSS Score
References
- midnight-commander-command-execution(18906) vdb-entryx_refsource_XF
- 13863 third-party-advisoryx_refsource_SECUNIA
- 1012903 vdb-entryx_refsource_SECTRACK
- DSA-639 vendor-advisoryx_refsource_DEBIAN
- RHSA-2005:512 vendor-advisoryx_refsource_REDHAT