CVE-2004-0395

CVE-2004-0395 describes a privilege escalation vulnerability in the xatitv program within the gatos package. When the configuration file is absent, xatitv fails to properly relinquish root privileges, allowing local users to execute arbitrary commands through shell metacharacters in system calls. This vulnerability carries a high severity CVSS score of 7.2, indicating a local attack vector with low complexity, leading to complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.