Description
changepassword.cgi in ChangePassword 0.8, when installed setuid, allows local users to execute arbitrary code by modifying the PATH environment variable to point to a malicious "make" program.
Unscored
CVE-2004-1263
EUVD-2004-1260GHSA-5ggr-qxh6-3vcm
changepassword.cgi in ChangePassword 0.8, when installed setuid, allows local users to execute arbitrary code by modifying the PATH environ…
Published Dec 22, 2004 · Updated Aug 8, 2024 · Assigned by mitre