CVE-2000-1109

Published: Jan 9, 2001Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

Midnight Commander (mc) 4.5.51 and earlier does not properly process malformed directory names when a user opens a directory, which allows other local users to gain privileges by creating directories that contain special characters followed by the commands to be executed.

Affected (12)

Products: Midnight Commander: Midnight Commander

Midnight Commander

1 product

Midnight Commander

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Midnight Commander Midnight Commander	Version 4.5.40
Midnight Commander Midnight Commander	Version 4.5.41
Midnight Commander Midnight Commander	Version 4.5.42
Midnight Commander Midnight Commander	Version 4.5.43
Midnight Commander Midnight Commander	Version 4.5.44
Midnight Commander Midnight Commander	Version 4.5.45
Midnight Commander Midnight Commander	Version 4.5.46
Midnight Commander Midnight Commander	Version 4.5.47
Midnight Commander Midnight Commander	Version 4.5.48
Midnight Commander Midnight Commander	Version 4.5.49
Midnight Commander Midnight Commander	Version 4.5.50
Midnight Commander Midnight Commander	Version 4.5.51