CVE-2004-0793

Publication date 20 October 2004

Last updated 17 July 2025

Ubuntu priority

Description

The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when executed with the -a flag, which allows attackers to execute arbitrary commands via a calendar event file.

Status

Show unmaintained releases

No maintained releases are affected by this CVE.

Package	Ubuntu Release	Status
bsdmainutils	7.04 feisty	Fixed 6.1.2ubuntu1
	6.10 edgy	Fixed 6.1.2ubuntu1
	6.06 LTS dapper	Fixed 6.1.2ubuntu1

How can I get the fixes?
What do statuses mean?

References

MITRE
NVD
Launchpad
Debian

Other references

https://www.cve.org/CVERecord?id=CVE-2004-0793