| Package | Affected versions | Patched versions |
|---|---|---|
| bsdmainutils | = 6.0= 6.0.1= 6.0.10= 6.0.11= 6.0.12= 6.0.13= 6.0.14= 6.0.2= 6.0.3= 6.0.4= 6.0.5= 6.0.6= 6.0.7= 6.0.8= 6.0.9 |
The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when executed with the -a flag, which allows attackers to execute arbitrary commands via a calendar event file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free