Lucene search
HistoryJun 01, 2004 - 4:00 a.m.
CVE-2004-0157
cve-2004-0157
x11.c
xonix 1.4
local users
arbitrary code
security vulnerability
7 High
AI Score
Confidence
High
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
25.3%
x11.c in xonix 1.4 and earlier uses the current working directory to find and execute the rmail program, which allows local users to execute arbitrary code by modifying the path to point to a malicious rmail program.
| CPE | Name | Operator | Version |
|---|---|---|---|
| xonix:xonix | xonix | le | 1.4 |
Related
nessus
nessus
FreeBSD Xonix vulnerability
2004-08-17 00:00:00
Debian DSA-484-1 : xonix - failure to drop privileges
2004-09-29 00:00:00
debian
debian
[SECURITY] [DSA 484-1] New xonix packages fix failure to drop privileges
2004-04-14 00:00:00
osv
osv
xonix - failure to drop privileges
2004-04-14 00:00:00
ubuntucve
ubuntucve
CVE-2004-0157
2004-06-01 00:00:00
cvelist
cvelist
CVE-2004-0157
2004-04-17 04:00:00
openvas
openvas
Debian: Security Advisory (DSA-484)
2008-01-17 00:00:00
Debian Security Advisory DSA 484-1 (xonix)
2008-01-17 00:00:00
debiancve
debiancve
CVE-2004-0157
2004-06-01 04:00:00
7 High
AI Score
Confidence
High
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
25.3%
Related for CVE-2004-0157