Read the docs
TI-2004-01070 Aliases CVE-2004-1176GHSA-6j4g-wprm-mhpw

Buffer underflow in extfs.c in Midnight Commander (mc) 4.5.55 and earlier allows remote…

Priority LOW 38Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.

Summary

Buffer underflow in extfs.c in Midnight Commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code.

Why it matters now

EPSS 0.03103 87th percentileScored 2026-11-07
Fix Fixed Red Hat: 1 advisory

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 47

CPEVersionsRoleVendor
cpe:2.3:a:midnight_commander:midnight_commander:4.5.40:*:*:*:*:*:*:*4.5.40VulnerableMidnight Commander
cpe:2.3:a:midnight_commander:midnight_commander:4.5.41:*:*:*:*:*:*:*4.5.41VulnerableMidnight Commander
cpe:2.3:a:midnight_commander:midnight_commander:4.5.42:*:*:*:*:*:*:*4.5.42VulnerableMidnight Commander
cpe:2.3:a:midnight_commander:midnight_commander:4.5.43:*:*:*:*:*:*:*4.5.43VulnerableMidnight Commander
cpe:2.3:a:midnight_commander:midnight_commander:4.5.44:*:*:*:*:*:*:*4.5.44VulnerableMidnight Commander
cpe:2.3:a:midnight_commander:midnight_commander:4.5.45:*:*:*:*:*:*:*4.5.45VulnerableMidnight Commander
cpe:2.3:a:midnight_commander:midnight_commander:4.5.46:*:*:*:*:*:*:*4.5.46VulnerableMidnight Commander
cpe:2.3:a:midnight_commander:midnight_commander:4.5.47:*:*:*:*:*:*:*4.5.47VulnerableMidnight Commander
cpe:2.3:a:midnight_commander:midnight_commander:4.5.48:*:*:*:*:*:*:*4.5.48VulnerableMidnight Commander
cpe:2.3:a:midnight_commander:midnight_commander:4.5.49:*:*:*:*:*:*:*4.5.49VulnerableMidnight Commander
  • cpe:2.3:a:midnight_commander:midnight_commander:4.5.40:*:*:*:*:*:*:* Versions 4.5.40 Vulnerable ·Midnight Commander
  • cpe:2.3:a:midnight_commander:midnight_commander:4.5.41:*:*:*:*:*:*:* Versions 4.5.41 Vulnerable ·Midnight Commander
  • cpe:2.3:a:midnight_commander:midnight_commander:4.5.42:*:*:*:*:*:*:* Versions 4.5.42 Vulnerable ·Midnight Commander
  • cpe:2.3:a:midnight_commander:midnight_commander:4.5.43:*:*:*:*:*:*:* Versions 4.5.43 Vulnerable ·Midnight Commander
  • cpe:2.3:a:midnight_commander:midnight_commander:4.5.44:*:*:*:*:*:*:* Versions 4.5.44 Vulnerable ·Midnight Commander
  • cpe:2.3:a:midnight_commander:midnight_commander:4.5.45:*:*:*:*:*:*:* Versions 4.5.45 Vulnerable ·Midnight Commander
  • cpe:2.3:a:midnight_commander:midnight_commander:4.5.46:*:*:*:*:*:*:* Versions 4.5.46 Vulnerable ·Midnight Commander
  • cpe:2.3:a:midnight_commander:midnight_commander:4.5.47:*:*:*:*:*:*:* Versions 4.5.47 Vulnerable ·Midnight Commander
  • cpe:2.3:a:midnight_commander:midnight_commander:4.5.48:*:*:*:*:*:*:* Versions 4.5.48 Vulnerable ·Midnight Commander
  • cpe:2.3:a:midnight_commander:midnight_commander:4.5.49:*:*:*:*:*:*:* Versions 4.5.49 Vulnerable ·Midnight Commander
Show 37 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:midnight_commander:midnight_commander:4.5.50:*:*:*:*:*:*:*4.5.50VulnerableMidnight Commander
cpe:2.3:a:midnight_commander:midnight_commander:4.5.51:*:*:*:*:*:*:*4.5.51VulnerableMidnight Commander
cpe:2.3:a:midnight_commander:midnight_commander:4.5.52:*:*:*:*:*:*:*4.5.52VulnerableMidnight Commander
cpe:2.3:a:midnight_commander:midnight_commander:4.5.54:*:*:*:*:*:*:*4.5.54VulnerableMidnight Commander
cpe:2.3:a:midnight_commander:midnight_commander:4.5.55:*:*:*:*:*:*:*4.5.55VulnerableMidnight Commander
cpe:2.3:a:midnight_commander:midnight_commander:4.6:*:*:*:*:*:*:*4.6VulnerableMidnight Commander
cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*3.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*3.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:*3.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:*3.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:*3.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:*3.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:*3.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:*3.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:*3.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:3.0:*:ppc:*:*:*:*:*3.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:3.0:*:s-390:*:*:*:*:*3.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:3.0:*:sparc:*:*:*:*:*3.0VulnerableDebian
cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*all versionsVulnerablegentoo
cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*2.1VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*2.1VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*2.1VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*2.1VulnerableRed Hat
cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:*2.1VulnerableRed Hat
cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium_processor:*:*:*:*:*2.1VulnerableRed Hat
cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*8.0VulnerableSUSE
cpe:2.3:o:suse:suse_linux:8.0:*:i386:*:*:*:*:*8.0VulnerableSUSE
cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*8.1VulnerableSUSE
cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*8.2VulnerableSUSE
cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*9.0VulnerableSUSE
cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*9.0VulnerableSUSE
cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*9.1VulnerableSUSE
cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*9.2VulnerableSUSE
cpe:2.3:o:turbolinux:turbolinux_server:7.0:*:*:*:*:*:*:*7.0VulnerableTurbolinux
cpe:2.3:o:turbolinux:turbolinux_server:8.0:*:*:*:*:*:*:*8.0VulnerableTurbolinux
cpe:2.3:o:turbolinux:turbolinux_workstation:7.0:*:*:*:*:*:*:*7.0VulnerableTurbolinux
cpe:2.3:o:turbolinux:turbolinux_workstation:8.0:*:*:*:*:*:*:*8.0VulnerableTurbolinux
  • cpe:2.3:a:midnight_commander:midnight_commander:4.5.50:*:*:*:*:*:*:* Versions 4.5.50 Vulnerable ·Midnight Commander
  • cpe:2.3:a:midnight_commander:midnight_commander:4.5.51:*:*:*:*:*:*:* Versions 4.5.51 Vulnerable ·Midnight Commander
  • cpe:2.3:a:midnight_commander:midnight_commander:4.5.52:*:*:*:*:*:*:* Versions 4.5.52 Vulnerable ·Midnight Commander
  • cpe:2.3:a:midnight_commander:midnight_commander:4.5.54:*:*:*:*:*:*:* Versions 4.5.54 Vulnerable ·Midnight Commander
  • cpe:2.3:a:midnight_commander:midnight_commander:4.5.55:*:*:*:*:*:*:* Versions 4.5.55 Vulnerable ·Midnight Commander
  • cpe:2.3:a:midnight_commander:midnight_commander:4.6:*:*:*:*:*:*:* Versions 4.6 Vulnerable ·Midnight Commander
  • cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:* Versions 3.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:* Versions 3.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:* Versions 3.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:* Versions 3.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:* Versions 3.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:* Versions 3.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:* Versions 3.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:* Versions 3.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:3.0:*:ppc:*:*:*:*:* Versions 3.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:3.0:*:s-390:*:*:*:*:* Versions 3.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:3.0:*:sparc:*:*:*:*:* Versions 3.0 Vulnerable ·Debian
  • cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·gentoo
  • cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:* Versions 2.1 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:* Versions 2.1 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:* Versions 2.1 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:* Versions 2.1 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:* Versions 2.1 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium_processor:*:*:*:*:* Versions 2.1 Vulnerable ·Red Hat
  • cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux:8.0:*:i386:*:*:*:*:* Versions 8.0 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:* Versions 8.1 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:* Versions 8.2 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:* Versions 9.0 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:* Versions 9.1 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·SUSE
  • cpe:2.3:o:turbolinux:turbolinux_server:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Turbolinux
  • cpe:2.3:o:turbolinux:turbolinux_server:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Turbolinux
  • cpe:2.3:o:turbolinux:turbolinux_workstation:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Turbolinux
  • cpe:2.3:o:turbolinux:turbolinux_workstation:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Turbolinux

Remediation

Red Hat 1 advisory

  • RHSA-2005:217 Released 2005-03-04 · Red Hat rating Moderate
    mc security update
    • Red Hat Enterprise Linux AS (Advanced Server) version 2.1
    • Red Hat Enterprise Linux WS version 2.1
    • Red Hat Linux Advanced Workstation 2.1

Vendor assessments

Red Hat

Red Hat rating: Low. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 Fixed RHSA-2005:217
Red Hat Enterprise Linux WS version 2.1Fixed RHSA-2005:217
Red Hat Linux Advanced Workstation 2.1Fixed RHSA-2005:217

Timeline

  1. 2026-10-02 Threatist record created from CVE-2004-1176
  2. 2026-10-03 Alias added: GHSA-6j4g-wprm-mhpw

References

Patch 1

Advisory 2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences