---
title: "CVE-2004-0157\n    | Ubuntu"
description: Ubuntu is an open source software operating system that runs from the
  desktop, to the cloud, to all your internet connected things.
url: https://ubuntu.com/security/CVE-2004-0157?format=md
keywords: index, follow
---

# CVE-2004-0157

Publication date 1 June 2004

Last updated 17 July 2025

---

Ubuntu priority

**Medium**

[Why this priority?](https://ubuntu.com/security/cves/about#priority )

Toggle side navigation

## Description

x11.c in xonix 1.4 and earlier uses the current working directory to find
and execute the rmail program, which allows local users to execute
arbitrary code by modifying the path to point to a malicious rmail program.

## Status

Show unmaintained releases

| Package | Ubuntu Release | Status |
| --- | --- | --- |
| xonix | 7.04 feisty | Fixed 1.4-21.1ubuntu1 |
| 6.10 edgy | Fixed 1.4-21.1ubuntu1 |
| 6.06 LTS dapper | Fixed 1.4-21.1ubuntu1 |

---

* [How can I get the fixes?](https://ubuntu.com/security/cves/about#security)
* [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses)

## References

* [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0157)
* [NVD](https://nvd.nist.gov/vuln/detail/CVE-2004-0157)
* [Launchpad](https://launchpad.net/bugs/cve/CVE-2004-0157)
* [Debian](https://security-tracker.debian.org/tracker/CVE-2004-0157)

### Other references

* <https://www.cve.org/CVERecord?id=CVE-2004-0157>