CVE-2004-0395

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

The xatitv program in the gatos package does not properly drop root privileges when the configuration file does not exist, which allows local users to execute arbitrary commands via shell metacharacters in a system call.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.debian.org/security/2004/dsa-509Patch, Vendor Advisory
http://www.securityfocus.com/bid/10437Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16273
http://www.debian.org/security/2004/dsa-509Patch, Vendor Advisory
http://www.securityfocus.com/bid/10437Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16273

Timeline

Published: Dec 6, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-03967.5Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to CVE-2004-03977.5Stack-based buffer overflow during the apr_time_t data conversion in Subversion 1.0.2 and earlier allows remote attackers to execute arbitra CVE-2004-03987.5Heap-based buffer overflow in the ne_rfc1036_parse date parsing function for the neon library (libneon) 0.24.5 and earlier, as used by cadav CVE-2004-03997.5Stack-based buffer overflow in Exim 3.35, and other versions before 4, when the sender_verify option is true, allows remote attackers to cau CVE-2004-04007.5Stack-based buffer overflow in Exim 4 before 4.33, when the headers_check_syntax option is enabled, allows remote attackers to cause a denia CVE-2004-040110.0Unknown vulnerability in libtasn1 0.1.x before 0.1.2, and 0.2.x before 0.2.7, related to the DER parsing functions.CVE-2004-04024.6Buffer overflow in xpcd-svga in xpcd before 2.08, and possibly other versions, may allow local users to execute arbitrary code.CVE-2004-04035.0Racoon before 20040408a allows remote attackers to cause a denial of service (memory consumption) via an ISAKMP packet with a large length f CVE-2004-04041.2logcheck before 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary directory in /var/tmp.CVE-2004-04055.0CVS before 1.11 allows CVS clients to read arbitrary files via .. (dot dot) sequences in filenames via CVS client requests, a different vuln CVE-2004-04072.6The HTML form upload capability in ColdFusion MX 6.1 does not reclaim disk space if an upload is interrupted, which allows remote attackers CVE-2004-04087.5Buffer overflow in the child_service function in the ident2 ident daemon allows remote attackers to execute arbitrary code.