CVE-2004-0793
The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when...
CVE-2004-0793 is a high vulnerability (CVSS 7.2) in Debian Bsdmainutils, published September 14, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.56%, the 47th percentile. Fixed in bsdmainutils 6.0.15.
- Severity
- 7.2 HighCVSS 2.0, NVD
- Exploit chance
- 0.56%EPSS, 47th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
6.0.15bsdmainutils +2 more
Description
The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when executed with the -a flag, which allows attackers to execute arbitrary commands via a calendar event file.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
bsdmainutilsDebian:12 | before 6.0.15 | 6.0.15 |
bsdmainutilsDebian:13 | before 6.0.15 | 6.0.15 |
bsdmainutilsDebian:14 | before 6.0.15 | 6.0.15 |
What each source reports
NVD Score used
The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when executed with the -a flag, which allows attackers to execute arbitrary commands via a calendar event file.
- Record
CVE-2004-0793- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE ListNo score
The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when executed with the -a flag, which allows attackers to execute arbitrary commands via a calendar event file.
- Record
CVE-2004-0793- Updated
- 2026-11-02
EUVDEUVD-2004-0791No score
The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when executed with the -a flag, which allows attackers to execute arbitrary commands via a calendar event file.
- Record
EUVD-2004-0791- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wwxq-2m47-f76vNo score
The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when...
The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when executed with the -a flag, which allows attackers to execute arbitrary commands via a calendar event file.
- Record
GHSA-wwxq-2m47-f76v- Updated
- 2026-11-02
OSVNo score
The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when executed with the -a flag, which allows attackers to execute arbitrary commands via a calendar event file.
- Record
CVE-2004-0793- Updated
- 2026-11-02
OSVDEBIAN-CVE-2004-0793No score
The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when executed with the -a flag, which allows attackers to execute arbitrary commands via a calendar event file.
- Record
DEBIAN-CVE-2004-0793- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.