CVE-2004-2504

Exploit

EPSS 0.09%
Veröffentlicht 31.12.2004 05:00:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

The GUI in Alt-N Technologies MDaemon 7.2 and earlier, including 6.8, executes child processes such as NOTEPAD.EXE with SYSTEM privileges when users create new files, which allows local users with physical access to gain privileges.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 11

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Alt-n ≫ Mdaemon Version6.8.0

Alt-n ≫ Mdaemon Version6.8.1

Alt-n ≫ Mdaemon Version6.8.2

Alt-n ≫ Mdaemon Version6.8.3

Alt-n ≫ Mdaemon Version6.8.4

Alt-n ≫ Mdaemon Version6.8.5

Alt-n ≫ Mdaemon Version7.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.09%	0.219

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

http://archives.neohapsis.com/archives/bugtraq/2004-11/0385.html

Exploit

http://archives.neohapsis.com/archives/fulldisclosure/2004-11/1324.html

Exploit

http://archives.neohapsis.com/archives/fulldisclosure/2004-11/1353.html

http://secunia.com/advisories/13225

Vendor Advisory

http://securitytracker.com/id?1012350

Exploit

http://www.osvdb.org/12158

http://www.securityfocus.com/bid/11736

https://exchange.xforce.ibmcloud.com/vulnerabilities/18287

https://nvd.nist.gov/vuln/detail/CVE-2004-2504

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2004-2504

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2004-2504

EUVD