VulnerabilityModified
CVE-2004-2504
The GUI in Alt-N Technologies MDaemon 7.2 and earlier, including 6.8, executes child processes such as NOTEPAD.EXE with SYSTEM privileges when users create new files, which allows local users with physical access to gain privileges.
HIGH 7.2EPSS 0.48%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.48%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The GUI in Alt-N Technologies MDaemon 7.2 and earlier, including 6.8, executes child processes such as NOTEPAD.EXE with SYSTEM privileges when users create new files, which allows local users with physical access to gain privileges.
- CVSS 2.0
- 7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 0.48% probability · 40th percentile
- CISA KEV
- Not listed
- Affected
- alt-n/mdaemon
- Source
- cve@mitre.org
References
- http://archives.neohapsis.com/archives/bugtraq/2004-11/0385.htmlExploit
- http://archives.neohapsis.com/archives/fulldisclosure/2004-11/1324.htmlExploit
- http://archives.neohapsis.com/archives/fulldisclosure/2004-11/1353.html
- http://secunia.com/advisories/13225Vendor Advisory
- http://securitytracker.com/id?1012350Exploit
- http://www.osvdb.org/12158
- http://www.securityfocus.com/bid/11736
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18287
- http://archives.neohapsis.com/archives/bugtraq/2004-11/0385.htmlExploit
- http://archives.neohapsis.com/archives/fulldisclosure/2004-11/1324.htmlExploit
- http://archives.neohapsis.com/archives/fulldisclosure/2004-11/1353.html
- http://secunia.com/advisories/13225Vendor Advisory
- http://securitytracker.com/id?1012350Exploit
- http://www.osvdb.org/12158
- http://www.securityfocus.com/bid/11736
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18287
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.