Unscored severity · published Dec 31, 2004
CVE-2004-2504
The GUI in Alt-N Technologies MDaemon 7.2 and earlier, including 6.8, executes child processes such as NOTEPAD.EXE with SYSTEM privileges when users create new files, which allows…
–
CVSS
0.5%
EPSS
No
On KEV
Description
The GUI in Alt-N Technologies MDaemon 7.2 and earlier, including 6.8, executes child processes such as NOTEPAD.EXE with SYSTEM privileges when users create new files, which allows local users with physical access to gain privileges.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 42% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MD
Mdaemon · Alt-n
6.8.0; 6.8.1; 6.8.2; 6.8.3; 6.8.4; 6.8.5; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-2504
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-2504
Exploit
http://archives.neohapsis.com/archives/bugtraq/2004-11/0385.html
Exploit
http://archives.neohapsis.com/archives/fulldisclosure/2004-11/1324.html
archives.neohapsis.com
http://archives.neohapsis.com/archives/fulldisclosure/2004-11/1353.html
Vendor Advisory
http://secunia.com/advisories/13225
Exploit
http://securitytracker.com/id?1012350
www.osvdb.org
http://www.osvdb.org/12158
More from Mdaemon
7.5
CVE-2006-5708
Multiple unspecified vulnerabilities in MDaemon and WorldClient in Alt-N Technologies MDaemon before 9.50 allow attackers to cause a denial of service (memory consumption) via…
–
CVE-2008-6967
Multiple unspecified vulnerabilities in WorldClient in Alt-N MDaemon before 10.02 have unknown impact and attack vectors, probably related to cross-site scripting (XSS) and…
–
CVE-2007-3622
Unspecified vulnerability in DomainPOP in Alt-N Technologies MDaemon before 9.61 allows remote attackers to cause a denial of service (crash) via malformed messages
–
CVE-2006-5968
MDaemon 9.0.5, 9.0.6, 9.51, and 9.53, and possibly other versions, installs the MDaemon application folder with insecure permissions (Users create files/directories), which allows…
–
CVE-2006-5709
Unspecified vulnerability in WorldClient in Alt-N Technologies MDaemon before 9.50 has unknown impact and attack vectors related to a "JavaScript exploit."