CVE-2004-2335: High severity Macromedia Contribute vulnerability
Published Dec 31, 2004
·Updated
The Macromedia installers and e-licensing client on Mac OS X, as used for Macromedia Contribute 2, Director, Dreamweaver, Fireworks, Flash, and Studio, install the AuthenticationService setuid and writable by other users, which allows local users to gain privileges by modifying the program.
Affected Software
2 affected components
Macromedia Contribute=2.0
Macromedia Studio=2004
Remediation
Patch Available
Event History
Dec 31, 2004
CVE Published
05:00 AM
Aug 16, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2335?
CVE-2004-2335 is considered a high severity vulnerability due to its potential for privilege escalation by local users.
2
How do I fix CVE-2004-2335?
To fix CVE-2004-2335, ensure that the AuthenticationService is not setuid and is not writable by other users.
3
Which software is affected by CVE-2004-2335?
CVE-2004-2335 affects Macromedia Contribute 2 and Macromedia Studio 2004.
4
What impact does CVE-2004-2335 have on system security?
CVE-2004-2335 can allow local users to gain unauthorized privileges, compromising system security.
5
When was CVE-2004-2335 discovered?
CVE-2004-2335 was discovered in the year 2004.