CVE-2004-0793
The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when...
The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when executed with the -a flag, which allows attackers to execute arbitrary commands via a calendar event file.
Exploit likelihood
What each source reports
NVD Score used
The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when executed with the -a flag, which allows attackers to execute arbitrary commands via a calendar event file.
- Record
CVE-2004-0793- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when executed with the -a flag, which allows attackers to execute arbitrary commands via a calendar event file.
- Record
CVE-2004-0793- Updated
- 2026-11-02
EUVDEUVD-2004-0791 No score
The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when executed with the -a flag, which allows attackers to execute arbitrary commands via a calendar event file.
- Record
EUVD-2004-0791- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wwxq-2m47-f76v No score
The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when...
The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when executed with the -a flag, which allows attackers to execute arbitrary commands via a calendar event file.
- Record
GHSA-wwxq-2m47-f76v- Updated
- 2026-11-02
OSV No score
The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when executed with the -a flag, which allows attackers to execute arbitrary commands via a calendar event file.
- Record
CVE-2004-0793- Updated
- 2026-11-02
OSVDEBIAN-CVE-2004-0793 No score
The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when executed with the -a flag, which allows attackers to execute arbitrary commands via a calendar event file.
- Record
DEBIAN-CVE-2004-0793- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
bsdmainutilsDebian:12 |
before 6.0.15 | 6.0.15 |
bsdmainutilsDebian:13 |
before 6.0.15 | 6.0.15 |
bsdmainutilsDebian:14 |
before 6.0.15 | 6.0.15 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-0793 is a high vulnerability (CVSS 7.2) in Debian Bsdmainutils, published September 14, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.56%, the 46th percentile. Fixed in bsdmainutils 6.0.15.