Every CVESearch/Get API key

CVE-2004-1092

Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service...

5.0 MediumFix available

CVE-2004-1092 is a medium vulnerability (CVSS 5.0) in Midnight Commander Commander, published January 14, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.67%, the 77th percentile. Fixed in mc 1:4.6.0-4.6.1-pre3-1.

What does this mean?
Severity
5.0 MediumCVSS 2.0, NVD
Exploit chance
1.67%EPSS, 77th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
1:4.6.0-4.6.1-pre3-1mc +3 more

Description

Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service by causing mc to free unallocated memory.

Exploit likelihood

1.67%Up 0.5 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
mc
Debian:12
before 1:4.6.0-4.6.1-pre3-1
1:4.6.0-4.6.1-pre3-1
mc
Debian:13
before 1:4.6.0-4.6.1-pre3-1
1:4.6.0-4.6.1-pre3-1
mc
Debian:14
before 1:4.6.0-4.6.1-pre3-1
1:4.6.0-4.6.1-pre3-1
mc
Debian:3.0
From an advisory covering 10 CVEs
before 4.5.55-1.2woody5, plus listed versions
4.5.55-1.2woody3
4.5.55-1.2woody5

What each source reports

NVD Score used5.0

Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service by causing mc to free unallocated memory.

Record
CVE-2004-1092
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated
2026-11-02
CVE ListNo score

Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service by causing mc to free unallocated memory.

Record
CVE-2004-1092
Updated
2026-11-02
EUVDEUVD-2004-1090No score

Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service by causing mc to free unallocated memory.

Record
EUVD-2004-1090
Updated
2026-11-03
GitHub AdvisoriesGHSA-hcgj-5qrp-g7x8No score

Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service...

Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service by causing mc to free unallocated memory.

Record
GHSA-hcgj-5qrp-g7x8
Updated
2026-11-02
OSVNo score

Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service by causing mc to free unallocated memory.

Record
CVE-2004-1092
Updated
2026-11-02
OSVDEBIAN-CVE-2004-1092No score

Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service by causing mc to free unallocated memory.

Record
DEBIAN-CVE-2004-1092
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open