Patchwire CVEs, their patch status, and feeds to follow them

CVE-2004-1175

Fixed in a distro release EPSS 2%

fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," possibly using shell metacharacters.

Published 2005-01-22 · CVE record · OSV

Products: midnight_commander, debian_linux, gentoo linux, redhat enterprise_linux, redhat linux_advanced_workstation, suse_linux, turbolinux_server, turbolinux_workstation

Distro releases

ReleasePackageFixed in
Debian 12mc1:4.6.0-4.6.1-pre3-1
Debian 13mc1:4.6.0-4.6.1-pre3-1
Debian 14mc1:4.6.0-4.6.1-pre3-1
Debian 3.0mc4.5.55-1.2woody5