CVE-2004-0151

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

Unknown vulnerability in xitalk 1.1.11 and earlier allows local users to execute arbitrary commands.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/11114/
http://shellcode.org/Advisories/XITALK.txt
http://www.debian.org/security/2004/dsa-462Patch, Vendor Advisory
http://www.securityfocus.com/bid/9851Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15456
http://secunia.com/advisories/11114/
http://shellcode.org/Advisories/XITALK.txt
http://www.debian.org/security/2004/dsa-462Patch, Vendor Advisory
http://www.securityfocus.com/bid/9851Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15456

Timeline

Published: Apr 15, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-01527.5Multiple stack-based buffer overflows in (1) the encode_mime function, (2) the encode_uuencode function, (3) or the decode_uuencode function CVE-2004-01537.5Multiple format string vulnerabilities in emil 2.1.0 and earlier may allow remote attackers to execute arbitrary code by triggering certain CVE-2004-01545.0rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory f CVE-2004-01557.5The KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not verify the RSA signature CVE-2004-01565.0Format string vulnerabilities in the (1) die or (2) log_event functions for ssmtp before 2.50.6 allow remote mail relays to cause a denial o CVE-2004-01574.6x11.c in xonix 1.4 and earlier uses the current working directory to find and execute the rmail program, which allows local users to execute CVE-2004-01584.6Buffer overflow in lbreakout2 allows local users to gain 'games' group privileges via a large HOME environment variable to (1) editor.c, (2)CVE-2004-01597.5Format string vulnerability in hsftp 1.11 allows remote authenticated users to cause a denial of service and possibly execute arbitrary code CVE-2004-01607.2Synaesthesia 2.2 and earlier allows local users to execute arbitrary code via a symlink attack on the configuration file.CVE-2004-01617.5Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use RF CVE-2004-01627.5Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME encapsulation that u CVE-2004-01635.0Sygate Secure Enterprise (SSE) 3.5MR3 and earlier does not change the key used to encrypt data, which allows remote attackers to cause a den