Test ID:	1.3.6.1.4.1.25623.1.0.53930
Category:	Slackware Local Security Checks
Title:	Slackware: Security Advisory (SSA:2004-136-01)
Summary:	The remote host is missing an update for the 'mc' package(s) announced via the SSA:2004-136-01 advisory.
Description:	Summary: The remote host is missing an update for the 'mc' package(s) announced via the SSA:2004-136-01 advisory. Vulnerability Insight: New mc packages are available for Slackware 9.0, 9.1, and -current to fix security issues that These could lead to a denial of service or the execution of arbitrary code as the user running mc. Sites that use mc should upgrade to the new mc package. More details about this issue may be found in the Common Vulnerabilities and Exposures (CVE) database: [links moved to references] Here are the details from the Slackware 9.1 ChangeLog: +--------------------------+ Fri May 14 15:11:37 PDT 2004 patches/packages/mc-4.6.0-i486-2.tgz: Patched to fix buffer overflow, format string, and temporary file creation vulnerabilities found by Andrew V. Samoilov and Pavel Roskin. These could lead to a denial of service or the execution of arbitrary code as the user running mc. For more details, see: [links moved to references] (* Security fix *) +--------------------------+ Affected Software/OS: 'mc' package(s) on Slackware 9.1, Slackware current. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0226 Debian Security Information: DSA-497 (Google Search) http://www.debian.org/security/2004/dsa-497 http://security.gentoo.org/glsa/glsa-200405-21.xml http://www.mandriva.com/security/advisories?name=MDKSA-2004:039 http://www.redhat.com/support/errata/RHSA-2004-172.html SuSE Security Announcement: SuSE-SA:2004:012 (Google Search) http://www.novell.com/linux/security/advisories/2004_12_mc.html XForce ISS Database: midnight-commander-local-privileges(16016) https://exchange.xforce.ibmcloud.com/vulnerabilities/16016 Common Vulnerability Exposure (CVE) ID: CVE-2004-0231 XForce ISS Database: midnight-commander-insecure-files(16020) https://exchange.xforce.ibmcloud.com/vulnerabilities/16020 Common Vulnerability Exposure (CVE) ID: CVE-2004-0232 XForce ISS Database: midnight-commander-format-string(16021) https://exchange.xforce.ibmcloud.com/vulnerabilities/16021
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.