CVE-2004-0793: Debian Bsdmainutils

High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days.

The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when executed with the -a flag, which allows attackers to execute arbitrary commands via a calendar event file.

Affected products

• Debian Bsdmainutils: version 6.0 only; version 6.0.1 only; version 6.0.2 only; version 6.0.3 only; version 6.0.4 only; version 6.0.5 only; …

Published 2004-10-20. Last modified 2026-06-16.