CVEvulnerability

CVE-2004-2504

7.2 HIGH Published 2004-12-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-12-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C

Description

The GUI in Alt-N Technologies MDaemon 7.2 and earlier, including 6.8, executes child processes such as NOTEPAD.EXE with SYSTEM privileges when users create new files, which allows local users with physical access to gain privileges.

Affected configurations

• alt-n mdaemon 6.8.0 • alt-n mdaemon 6.8.1 • alt-n mdaemon 6.8.2 • alt-n mdaemon 6.8.3 • alt-n mdaemon 6.8.4 • alt-n mdaemon 6.8.5 • alt-n mdaemon 7.2

Related

Referenced by CWE · observed example (1)

  • CWE-271 Privilege Dropping / Lowering Errors weakness

References