CVE-2004-0395

The xatitv program in the gatos package does not properly drop root privileges when the configuration file does not exist, which allows local users to execute…

published July 8, 2004

CVSS
—
EPSS
0%
Percentile
33.8
In the wild
Unconfirmed
What it is

The xatitv program in the gatos package does not properly drop root privileges when the configuration file does not exist, which allows local users to execute arbitrary commands via shell metacharacters in a system call.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00410 · 33.8th percentile
Published
2004-07-08T04:00Z
EPSS history
Timeline
  • 08 JUL 04:00Z
    The xatitv program in the gatos package does not properly drop root privileges when the configuration file does not exist, which allows local users to execute…
    cvelistv5