CVE-2004-2504 The GUI in Alt-N Technologies MDaemon 7.2 and earlier, including 6.8, executes child processes such as NOTEPAD.EXE with SYSTEM privileges when users create new files, which allows local users with phy...
HighCVSS 7.2
EPSS 0.48%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The GUI in Alt-N Technologies MDaemon 7.2 and earlier, including 6.8, executes child processes such as NOTEPAD.EXE with SYSTEM privileges when users create new files, which allows local users with physical access to gain privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| alt-n mdaemon | = 6.8.0 | No fix listed |
| alt-n mdaemon | = 6.8.1 | No fix listed |
| alt-n mdaemon | = 6.8.2 | No fix listed |
| alt-n mdaemon | = 6.8.3 | No fix listed |
| alt-n mdaemon | = 6.8.4 | No fix listed |
| alt-n mdaemon | = 6.8.5 | No fix listed |
| alt-n mdaemon | = 7.2 | No fix listed |
References
- 20041129 Privilege escalation flaw in MDaemon 7.2. exploit mailing-list
- 20041129 Privilege escalation flaw in MDaemon 7.2. exploit mailing-list
- 20041130 Re: Privilege escalation flaw in MDaemon 7.2. mailing-list
- 13225 third-party-advisory vendor-advisory
- 1012350 exploit vdb-entry
- 12158 vdb-entry
- 11736 vdb-entry
- mdaemon-gain-privileges(18287) vdb-entry