high7.2
CVE-2004-1263
changepassword.cgi in ChangePassword 0.8, when installed setuid, allows local users to execute arbitrary code by modifying the PATH environment variable to poi…
Impact
changepassword.cgi in ChangePassword 0.8, when installed setuid, allows local users to execute arbitrary code by modifying the PATH environment variable to point to a malicious "make" program.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Changepassword | Changepassword | Versions 0.1, 0.2, 0.3, 0.4, 0.5, 0.6 |