Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Midnight Commander (mc) 4.8.5 does not properly handle the (1) MC_EXT_SELECTED or (2) MC_EXT_ONLYTAGGED environment variables when multiple files are selected, which allows user-assisted remote attackers to execute arbitrary commands via a crafted file name.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Midnight Commander 任意命令执行漏洞
Vulnerability Description
Midnight Commander是一个UNIX系统下使用的文件管理工具。 Midnight Commander (mc) 4.8.5版本中存在漏洞，该漏洞源于选择多个文件时，没有正确处理(1) MC_EXT_SELECTED或(2) MC_EXT_ONLYTAGGED环境变量。用户协助的远程攻击者可利用该漏洞通过特制的文件名，执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A