CVE-2004-0157

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

x11.c in xonix 1.4 and earlier uses the current working directory to find and execute the rmail program, which allows local users to execute arbitrary code by modifying the path to point to a malicious rmail program.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
Jun 1, 2004
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2004

CVE-2004-01584.6Buffer overflow in lbreakout2 allows local users to gain 'games' group privileges via a large HOME environment variable to (1) editor.c, (2)CVE-2004-01597.5Format string vulnerability in hsftp 1.11 allows remote authenticated users to cause a denial of service and possibly execute arbitrary codeCVE-2004-01607.2Synaesthesia 2.2 and earlier allows local users to execute arbitrary code via a symlink attack on the configuration file.CVE-2004-01617.5Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use RFCVE-2004-01627.5Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME encapsulation that uCVE-2004-01635.0Sygate Secure Enterprise (SSE) 3.5MR3 and earlier does not change the key used to encrypt data, which allows remote attackers to cause a denCVE-2004-01645.0KAME IKE daemon (racoon) does not properly handle hash values, which allows remote attackers to delete certificates via (1) a certain deleteCVE-2004-01655.0Format string vulnerability in Point-to-Point Protocol (PPP) daemon (pppd) 2.4.0 for Mac OS X 10.3.2 and earlier allows remote attackers to CVE-2004-01665.0Unknown vulnerability in Safari web browser for Mac OS X 10.2.8 related to "the display of URLs in the status bar."CVE-2004-01677.5DiskArbitration in Mac OS X 10.2.8 and 10.3.2 does not properly initialize writeable removable media.CVE-2004-016810.0Unknown vulnerability in CoreFoundation for Mac OS X 10.3.2, related to "notification logging."CVE-2004-01695.0QuickTime Streaming Server in MacOS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service (crash) via DESCRIBE requests w