CVE-2004-2335 The Macromedia installers and e-licensing client on Mac OS X, as used for Macromedia Contribute 2, Director, Dreamweaver, Fireworks, Flash, and Studio, install the AuthenticationService setuid and wri...
HighCVSS 7.2
EPSS 0.36%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Macromedia installers and e-licensing client on Mac OS X, as used for Macromedia Contribute 2, Director, Dreamweaver, Fireworks, Flash, and Studio, install the AuthenticationService setuid and writable by other users, which allows local users to gain privileges by modifying the program.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| macromedia contribute | = 2.0 | No fix listed |
| macromedia studio | = 2004 | No fix listed |
References
- 11123 third-party-advisory
- www.macromedia.com patch vendor-advisory
- 9862 patch vdb-entry
- elicensing-gain-privileges(15465) vdb-entry