CVE-2004-0395
N/A
N/A
Summary
The xatitv program in the gatos package does not properly drop root privileges when the configuration file does not exist, which allows local users to execute arbitrary commands via shell metacharacters in a system call.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://www.debian.org/security/2004/dsa-509
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16273
- http://www.securityfocus.com/bid/10437
References
- http://www.debian.org/security/2004/dsa-509
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16273
- http://www.securityfocus.com/bid/10437
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.