CVE-2000-1108 Path traversal in n/a

Medium 4.6 Published 7 May 2001 Updated 8 Aug 2024

Local attackers can corrupt arbitrary files via symbolic link attacks in Midnight Commander's cons.saver component.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2000-1108?

CVE-2000-1108 is a medium-severity path traversal vulnerability in n/a, published on 7 May 2001. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

cons.saver in Midnight Commander (mc) 4.5.42 and earlier does not properly verify if an output file descriptor is a TTY, which allows local users to corrupt files by creating a symbolic link to the target file, calling mc, and specifying that link as a TTY argument.

Which versions are affected by CVE-2000-1108?

It affects 1 product.

Products include Midnight Commander Midnight Commander.

How do I fix CVE-2000-1108?

No fix has been published for CVE-2000-1108 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2000-1108 being exploited?

There is no known exploitation of CVE-2000-1108 in the wild and no public exploit code.

Sources

Also known as GHSA-373p-qrfg-hfq4.