CVE-2004-0850

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

Star before 1.5_alpha46 does not drop the effective user ID (euid) before calling external programs, which could allow local users to gain privileges by modifying the RSH environment variable to reference a malicious program.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://securitytracker.com/id?1011195
http://www.gentoo.org/security/en/glsa/glsa-200409-11.xml
http://www.kb.cert.org/vuls/id/339089Patch, Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/11141Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17297
http://securitytracker.com/id?1011195
http://www.gentoo.org/security/en/glsa/glsa-200409-11.xml
http://www.kb.cert.org/vuls/id/339089Patch, Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/11141Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17297

Timeline

Published: Dec 23, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-08512.1The (1) write_list and (2) dump_curr_list functions in Net-Acct before 0.71 allows local users to overwrite arbitrary files via a symlink at CVE-2004-08527.5Buffer overflow in htget 0.93 allows remote attackers to execute arbitrary code via a crafted URL.CVE-2004-08667.5Internet Explorer 6.0 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which c CVE-2004-08677.5Mozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which c CVE-2004-08695.0Internet Explorer does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/S CVE-2004-08705.0KDE Konqueror does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) CVE-2004-08715.0Mozilla does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the CVE-2004-08725.0Opera does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the s CVE-2004-08737.5Apple iChat AV 2.1, AV 2.0, and 1.0.1 allows remote attackers to execute arbitrary programs via a "link" that references the program.CVE-2004-08756.8Multiple cross-site scripting (XSS) vulnerabilities in Phpgroupware (aka webdistro) 0.9.16.002 and earlier allow remote attackers to insert CVE-2004-08801.2getmail 4.x before 4.2.0, when run as root, allows local users to overwrite arbitrary files via a symlink attack on an mbox file.CVE-2004-08812.1getmail 4.x before 4.2.0, and other versions before 3.2.5, when run as root, allows local users to write files in arbitrary directories via