CVE-2004-0793: The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when executed with th...

Security readout for executives and security teams

CVE-2004-0793 is an old local privilege escalation issue in the calendar program from bsdmainutils 6.0 through 6.0.14. If triggered through the affected -a behavior, commands from a calendar event file could run with root privileges. Exposure is most likely on legacy Debian testing/unstable systems or derived images still running bsdmainutils 6.0 through 6.0.14 with local users or processes able to influence calendar event files. Treat as high priority only where legacy affected systems still exist. Modern environments are unlikely to be exposed, but any confirmed affected host creates root-compromise risk from local access. Mitigation focus: Upgrade bsdmainutils to 6.0.15 or later using trusted distribution packages.; Remove or disable affected bsdmainutils calendar functionality where it is not needed.; Restrict local shell access on legacy systems until package status is confirmed..

Prepared

Jun 30, 2026, 02:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.