Security Advisory
CVE-2004-1175
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," possibly using shell metacharacters.