CVE-2004-0793 Privilege escalation in n/a
Local attackers can execute arbitrary commands with root privileges by exploiting a calendar event file due to missing privilege dropping.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2004-0793?
CVE-2004-0793 is a high-severity vulnerability in n/a, published on 14 Sep 2004. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when executed with the -a flag, which allows attackers to execute arbitrary commands via a calendar event file.
Weakness: CWE-264
Which versions are affected by CVE-2004-0793?
It affects 1 product.
Products include Debian Bsdmainutils.
How do I fix CVE-2004-0793?
Upgrade to a fixed version.
Is CVE-2004-0793 being exploited?
There is no known exploitation of CVE-2004-0793 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2004-0793, GHSA-wwxq-2m47-f76v.