Unrated severityNVD Advisory· Published Jan 9, 2001· Updated Jun 16, 2026
CVE-2000-1108
CVE-2000-1108
Description
cons.saver in Midnight Commander (mc) 4.5.42 and earlier does not properly verify if an output file descriptor is a TTY, which allows local users to corrupt files by creating a symbolic link to the target file, calling mc, and specifying that link as a TTY argument.
Affected products
2<=4.5.42+ 1 more
- (no CPE)range: <=4.5.42
- cpe:2.3:a:midnight_commander:midnight_commander:4.5.42:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
5- www.debian.org/security/2000/20001125nvdPatchVendor Advisory
- www.securityfocus.com/bid/1945nvdExploitPatchVendor Advisory
- archives.neohapsis.com/archives/bugtraq/2000-11/0192.htmlnvd
- www.linux-mandrake.com/en/security/MDKSA-2000-078.php3nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/5519nvd
News mentions
0No linked articles in our index yet.