CVE-2004-0157

Published: Jun 1, 2004Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

x11.c in xonix 1.4 and earlier uses the current working directory to find and execute the rmail program, which allows local users to execute arbitrary code by modifying the path to point to a malicious rmail program.

Affected (1)

Products: Xonix: Xonix

Xonix

1 product

Xonix

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Xonix Xonix	version ≤ 1.4

References (14)

http://secunia.com/advisories/11382

Source: cve@mitre.org

http://securitytracker.com/id?1009789

Source: cve@mitre.org

http://shellcode.org/Advisories/XONIX.txt

Source: cve@mitre.org

http://www.debian.org/security/2004/dsa-484

Source: cve@mitre.org

PatchVendor Advisory

http://www.osvdb.org/5358

Source: cve@mitre.org

http://www.securityfocus.com/bid/10149

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/15873

Source: cve@mitre.org

http://secunia.com/advisories/11382