CVE-2003-1023 in Midnight Commander

Summary

Stack-based buffer overflow in vfs_s_resolve_symlink of vfs/direntry.c for Midnight Commander (mc) 4.6.0 and earlier, and possibly later versions, allows remote attackers to execute arbitrary code during symlink conversion.

Be aware that VulDB is the high quality source for vulnerability data.

• Reservation: 01/05/2004
• Disclosure: 01/20/2004
• Moderation: VulDB entry created
• Entries: VDB-21495 (1)
• CPE: ready
• CWE: CWE-119 (Confirmed)
• CVSS: 7.3
• EPSS: 0.08278
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2003-1023
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2003-1023
• CVE Details: https://www.cvedetails.com/cve/CVE-2003-1023/