CVEvulnerability
CVE-2004-2335
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
The Macromedia installers and e-licensing client on Mac OS X, as used for Macromedia Contribute 2, Director, Dreamweaver, Fireworks, Flash, and Studio, install the AuthenticationService setuid and writable by other users, which allows local users to gain privileges by modifying the program.
Affected configurations
• macromedia contribute 2.0
• macromedia studio 2004
References
- http://secunia.com/advisories/11123 secunia.com
- http://www.macromedia.com/devnet/security/security_zone/mpsb04-03.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/9862 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15465 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/11123 secunia.com
- http://www.macromedia.com/devnet/security/security_zone/mpsb04-03.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/9862 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15465 exchange.xforce.ibmcloud.com