CVE-2004-0850

HIGH 7.2CVE-2004-0850 · Published 23/12/2004 · updated 16/06/2026

In short

CVE-2004-0850 is a HIGH (CVSS 7.2) vulnerability affecting star tape archiver (joerg schilling).
Chance of exploitation in the next 30 days (EPSS): 0.43%, higher than 37.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
star tape archiver joerg_schilling	`= 1.5_a45`	No fix yet

Description

Star before 1.5_alpha46 does not drop the effective user ID (euid) before calling external programs, which could allow local users to gain privileges by modifying the RSH environment variable to reference a malicious program.

References

securitytracker.com/id
gentoo.org/security/en/glsa/glsa-200409-11.xml
kb.cert.org/vuls/id/339089 · Patch
securityfocus.com/bid/11141 · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/17297

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free