Alerts This Week
Warning Icon 1 640
Alerts This Week
Warning Icon 1 640

Red Hat Enterprise Linux 2.1 RHSA-2004:464-02 Critical Shell Escape Issue

red hat
Calendar Grey January 5, 2005
Dist Redhat Esm H88
The latest mc package provided by Red Hat addresses shell escape vulnerabilities while improving overall security measures. Ensure to verify available updates.
An updated mc package that resolves several shell escape security issues is now available.

Solution

Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command:

up2date

For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system:

https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/

5. Bug IDs fixed (http://bugzilla.redhat.com/):

127974 - CAN-2004-0494 extfs vfs vulnerability in mc

6. RPMs required:

Red Hat Enterprise Linux AS (Advanced Server) version 2.1:

SRPMS: afec2c565d6a6ddef751653eebaa3ad6 mc-4.5.51-36.4.src.rpm

i386: 565ad0abe3823a8c003e585ebc44556c gmc-4.5.51-36.4.i386.rpm 10f69a32fd981ffcb2c018e070ca9b62 mc-4.5.51-36.4.i386.rpm 100b1d71bd280502b5db3809b56f3a48 mcserv-4.5.51-36.4.i386.rpm

ia64: 998718f8ed57261a5553abbfd9a0b44b gmc-4.5.51-36.4.ia64.rpm 662118226d4084bbe6e67f19f7918af1 mc-4.5.51-36.4.ia64.rpm 03e4390ff9254bdd57c08fdc7ca76f4a mcserv-4.5.51-36.4.ia64.rpm

Red Hat Linux Advanced Workstation 2.1:

SRPMS: afec2c565d6a6ddef751653eebaa3ad6 mc-4.5.51-36.4.src.rpm

ia64: 998718f8ed57261a5553abbfd9a0b44b gmc-4.5.51-36.4.ia64.rpm 662118226d4084bbe6e67f19f7918af1 mc-4.5.51-36.4.ia64.rpm 03e4390ff9254bdd57c08fdc7ca76f4a mcserv-4.5.51-36.4.ia64.rpm

Red Hat Enterprise Linux WS version 2.1:

SRPMS: afec2c565d6a6ddef751653eebaa3ad6 mc-4.5.51-36.4.src.rpm

i386: 565ad0abe3823a8c003e585ebc44556c gmc-4.5.51-36.4.i386.rpm 10f69a32fd981ffcb2c018e070ca9b62 mc-4.5.51-36.4.i386.rpm 100b1d71bd280502b5db3809b56f3a48 mcserv-4.5.51-36.4.i386.rpm

These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package

Summary

Topics%20covered

Topics Covered

security advisory security issue critical Red Hat Enterprise Linux arbitrary command execution mc package shell escape

References

https://www.cve.org/CVERecord?id=CAN-2004-0494

Package List


Severity
critical
Lowest
Low
Medium
High
Critical

Advisory ID: RHSA-2004:464-02
Advisory URL: https://access.redhat.com/errata/RHSA-2004:464.html
Issue date: 2005-01-05
Updated on: 2005-01-05
Product: Red Hat Enterprise Linux

Topic

Topics%20covered

Topics Covered

security advisory security issue critical Red Hat Enterprise Linux arbitrary command execution mc package shell escape

Relevant Releases Architectures

Red Hat Enterprise Linux AS (Advanced Server) version 2.1 - i386, ia64

Red Hat Linux Advanced Workstation 2.1 - ia64

Red Hat Enterprise Linux WS version 2.1 - i386

Bugs Fixed

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here