CVE-2004-0793

{"id": "CVE-2004-0793", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2004-10-20T04:00:00.000", "references": [{"url": "http://marc.info/?l=bugtraq&m=109396230317359&w=2", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/11077", "tags": ["Exploit", "Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17162", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when executed with the -a flag, which allows attackers to execute arbitrary commands via a calendar event file."}, {"lang": "es", "value": "El programa de calendario en bsdmainutils 6.0 a 6.0.14 cuando se ejecuta con la opci\u00f3n -a, no suelta los privilegios de root, lo que permite a atacantes ejecutar \u00f3rdenes de su elecci\u00f3n mediante un cierto fichero de evento de calendario."}], "lastModified": "2017-07-11T01:30:28.730", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:debian:bsdmainutils:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "33F7B97D-4411-4F01-B969-BA06CEBB816E"}, {"criteria": "cpe:2.3:a:debian:bsdmainutils:6.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CBB4D25B-CF20-484B-8570-ABA6F2468F91"}, {"criteria": "cpe:2.3:a:debian:bsdmainutils:6.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2357F328-0629-46B3-8E70-3C19C7F0DFC0"}, {"criteria": "cpe:2.3:a:debian:bsdmainutils:6.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C008A9A0-C348-42F3-A436-D3B085FDF4D3"}, {"criteria": "cpe:2.3:a:debian:bsdmainutils:6.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0BB1896A-72CC-4E8F-875D-BAA7E2296B49"}, {"criteria": "cpe:2.3:a:debian:bsdmainutils:6.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "12224CB6-0A54-432C-B8D4-F51843938C5D"}, {"criteria": "cpe:2.3:a:debian:bsdmainutils:6.0.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A740E9E8-7401-49A2-B745-CBC89A98E0D7"}, {"criteria": "cpe:2.3:a:debian:bsdmainutils:6.0.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B5A7B389-6593-4578-B342-313227382F96"}, {"criteria": "cpe:2.3:a:debian:bsdmainutils:6.0.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8CF7BB82-1111-4C4A-A899-FD33C8A798A2"}, {"criteria": "cpe:2.3:a:debian:bsdmainutils:6.0.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "96C547C1-0363-4B19-9DF8-A3F0BB10F587"}, {"criteria": "cpe:2.3:a:debian:bsdmainutils:6.0.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2A9B8C42-9311-4A95-A120-ABC24F4122BC"}, {"criteria": "cpe:2.3:a:debian:bsdmainutils:6.0.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7B069BF2-5E87-47BC-A330-CB12D9DC63CE"}, {"criteria": "cpe:2.3:a:debian:bsdmainutils:6.0.12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "22EBA80D-1968-4913-90D4-CFDCE888E96D"}, {"criteria": "cpe:2.3:a:debian:bsdmainutils:6.0.13:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1417390C-4C78-4ED1-8FD8-158B1E064103"}, {"criteria": "cpe:2.3:a:debian:bsdmainutils:6.0.14:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FCA90C16-50D9-4368-AE14-00910F5D55C6"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}