Privilege Escalation Vulnerability in bsdmainutils Calendar Program

CVE-2004-0793 · HIGH Severity

AV:L/AC:L/AU:N/C:C/I:C/A:C

The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when executed with the -a flag, which allows attackers to execute arbitrary commands via a calendar event file.

Learn more about our Web Application Penetration Testing UK.