CVE-2004-0157

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-06-01 · updated 2026-06-16

Description

x11.c in xonix 1.4 and earlier uses the current working directory to find and execute the rmail program, which allows local users to execute arbitrary code by modifying the path to point to a malicious rmail program.

Affected products

Xonix: through 1.4

References

http://secunia.com/advisories/11382
http://securitytracker.com/id?1009789
http://shellcode.org/Advisories/XONIX.txt
http://www.debian.org/security/2004/dsa-484
http://www.osvdb.org/5358
http://www.securityfocus.com/bid/10149
https://exchange.xforce.ibmcloud.com/vulnerabilities/15873
http://secunia.com/advisories/11382
http://securitytracker.com/id?1009789
http://shellcode.org/Advisories/XONIX.txt
http://www.debian.org/security/2004/dsa-484
http://www.osvdb.org/5358

Get alerted when CVE-2004-0157 or the next vulnerability affects your stack