CVE-2000-1108

cons.saver in Midnight Commander (mc) 4.5.42 and earlier does not properly verify if an output file descriptor is a TTY, which allows local users to corrupt…

published May 7, 2001

CVSS
—
EPSS
0%
Percentile
36.8
In the wild
Unconfirmed
What it is

cons.saver in Midnight Commander (mc) 4.5.42 and earlier does not properly verify if an output file descriptor is a TTY, which allows local users to corrupt files by creating a symbolic link to the target file, calling mc, and specifying that link as a TTY argument.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00439 · 36.8th percentile
Published
2001-05-07T04:00Z
EPSS history
Timeline
  • 07 MAY 04:00Z
    cons.saver in Midnight Commander (mc) 4.5.42 and earlier does not properly verify if an output file descriptor is a TTY, which allows local users to corrupt…
    cvelistv5