CVE-2004-0793

The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when executed with the -a flag, which allows attackers to execute arbitrary commands via a calendar event file.

Score

CVSS 2.0 7.2 High

Status

Modified - cve@mitre.org

Published

2004-10-20

Last modified

2024-08-08

Weaknesses

CWE-264

Affected products

• Bsdmainutils (Debian)

References

• http://marc.info/?l=bugtraq&m=109396230317359&w=2
• http://www.securityfocus.com/bid/11077
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17162