CVEvulnerability
CVE-2004-0157
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-06-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Description
x11.c in xonix 1.4 and earlier uses the current working directory to find and execute the rmail program, which allows local users to execute arbitrary code by modifying the path to point to a malicious rmail program.
Affected configurations
• xonix xonix (<= 1.4)
References
- http://secunia.com/advisories/11382 secunia.com
- http://securitytracker.com/id?1009789 securitytracker.com
- http://shellcode.org/Advisories/XONIX.txt shellcode.org
- http://www.debian.org/security/2004/dsa-484 Patch, Vendor Advisory
- http://www.osvdb.org/5358 www.osvdb.org
- http://www.securityfocus.com/bid/10149 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15873 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/11382 secunia.com
- http://securitytracker.com/id?1009789 securitytracker.com
- http://shellcode.org/Advisories/XONIX.txt shellcode.org
- http://www.debian.org/security/2004/dsa-484 Patch, Vendor Advisory
- http://www.osvdb.org/5358 www.osvdb.org
- http://www.securityfocus.com/bid/10149 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15873 exchange.xforce.ibmcloud.com