CVE-2004-1263

changepassword.cgi in ChangePassword 0.8, when installed setuid, allows local users to execute arbitrary code by modifying the PATH environment variable to point to a malicious "make" program.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:changepassword:changepassword:0.5:*:*:*:*:*:*:*
cpe:2.3:a:changepassword:changepassword:0.6:*:*:*:*:*:*:*
cpe:2.3:a:changepassword:changepassword:0.3:*:*:*:*:*:*:*
cpe:2.3:a:changepassword:changepassword:0.4:*:*:*:*:*:*:*
cpe:2.3:a:changepassword:changepassword:0.1:*:*:*:*:*:*:*
cpe:2.3:a:changepassword:changepassword:0.2:*:*:*:*:*:*:*
cpe:2.3:a:changepassword:changepassword:0.8:*:*:*:*:*:*:*
cpe:2.3:a:changepassword:changepassword:0.6.1:*:*:*:*:*:*:*
cpe:2.3:a:changepassword:changepassword:0.7:*:*:*:*:*:*:*

Information

Published : 2005-01-09 21:00

Updated : 2017-07-10 18:30


NVD link : CVE-2004-1263

Mitre link : CVE-2004-1263


JSON object : View

Advertisement

dedicated server usa

Products Affected

changepassword

  • changepassword