CVE-2004-0232: Gentoo Linux

Medium severity, CVSS 5.0. EPSS: 2.9% chance of exploitation in the next 30 days.

Multiple format string vulnerabilities in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code.

Affected products

• Gentoo Linux: version 0.5 only; version 0.7 only; version 1.1a only; version 1.2 only; version 1.4 only
• Midnight Commander Midnight Commander: version 4.5.40 only; version 4.5.41 only; version 4.5.42 only; version 4.5.43 only; version 4.5.44 only; version 4.5.45 only; …
• Sgi Propack: version 2.3 only; version 2.4 only
• Slackware Slackware Linux: any version; version 9.0 only; version 9.1 only

Published 2004-08-18. Last modified 2026-06-16.