Security Advisory (MDKSA-2004:007): mc

[aru]

MandrakeSoft Security Advisory MDKSA-2004:007 : mc

 

January 26th, 2004

Updated mc packages fix buffer overflow vulnerability

 

A buffer overflow was discovered in mc's virtual filesystem code. This vulnerability could allow remote attackers to execute arbitrary code during symlink conversion.

 

The updated packages have been patched to correct the problem.

 

 

The released versions of Mandrake GNU/Linux affected are:

• 9.1
  
• 9.2
  
• 9.2/AMD64
  
• Corporate Server 2.1
  

Full information about this advisory, including the updated packages, is available at:

www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:007

 

Other references:

http://cve.mitre.org/cgi-bin/cvename.cgi?n...e=CAN-2003-1023

 

Posted automatically by aru (mdksec2mub v0.0.8)