x11.c in xonix 1.4 and earlier uses the current working directory to find and execute the rmail program, allowing local users to execute arbitrary code
Reporter | Title | Published | Views | Family All 11 |
---|---|---|---|---|
![]() | Debian DSA-484-1 : xonix - failure to drop privileges | 29 Sep 200400:00 | – | nessus |
![]() | FreeBSD Xonix vulnerability | 17 Aug 200400:00 | – | nessus |
![]() | Debian Security Advisory DSA 484-1 (xonix) | 17 Jan 200800:00 | – | openvas |
![]() | Debian: Security Advisory (DSA-484) | 17 Jan 200800:00 | – | openvas |
![]() | CVE-2004-0157 | 1 Jun 200404:00 | – | debiancve |
![]() | CVE-2004-0157 | 1 Jun 200404:00 | – | nvd |
![]() | CAN-2004-0157 | 6 Aug 202410:09 | – | cve |
![]() | xonix - failure to drop privileges | 14 Apr 200400:00 | – | osv |
![]() | CVE-2004-0157 | 1 Jun 200400:00 | – | ubuntucve |
![]() | CVE-2004-0157 | 17 Apr 200404:00 | – | cvelist |
Source | Link |
---|---|
osvdb | www.osvdb.org/5358 |
shellcode | www.shellcode.org/Advisories/XONIX.txt |
securitytracker | www.securitytracker.com/id |
secunia | www.secunia.com/advisories/11382 |
exchange | www.exchange.xforce.ibmcloud.com/vulnerabilities/15873 |
securityfocus | www.securityfocus.com/bid/10149 |
debian | www.debian.org/security/2004/dsa-484 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo