CVE-2004-0850

Star before 1.5_alpha46 does not drop the effective user ID (euid) before calling external programs, which could allow local users to gain privileges by…

published September 24, 2004

CVSS
—
EPSS
0%
Percentile
36.3
In the wild
Unconfirmed
What it is

Star before 1.5_alpha46 does not drop the effective user ID (euid) before calling external programs, which could allow local users to gain privileges by modifying the RSH environment variable to reference a malicious program.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00433 · 36.3th percentile
Published
2004-09-24T04:00Z
EPSS history
Timeline
  • 24 SEP 04:00Z
    Star before 1.5_alpha46 does not drop the effective user ID (euid) before calling external programs, which could allow local users to gain privileges by…
    cvelistv5