CVE-2004-2504: High severity Alt-N MDaemon vulnerability
Published Dec 31, 2004
·Updated
The GUI in Alt-N Technologies MDaemon 7.2 and earlier, including 6.8, executes child processes such as NOTEPAD.EXE with SYSTEM privileges when users create new files, which allows local users with physical access to gain privileges.
Affected Software
7 affected components
Alt-N MDaemon=6.8.3
Alt-N MDaemon=7.2
Alt-N MDaemon=6.8.1
Alt-N MDaemon=6.8.4
Alt-N MDaemon=6.8.0
Alt-N MDaemon=6.8.5
Alt-N MDaemon=6.8.2
Event History
Dec 31, 2004
CVE Published
05:00 AM
Oct 25, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2504?
CVE-2004-2504 is considered a high-severity vulnerability due to its potential to allow local users to gain SYSTEM privileges.
2
How do I fix CVE-2004-2504?
To fix CVE-2004-2504, upgrade to a version of MDaemon later than 7.2 that addresses this privilege escalation issue.
3
Which versions of MDaemon are affected by CVE-2004-2504?
CVE-2004-2504 affects MDaemon versions 6.8.0 to 7.2, including both the 6.8.x and 7.2 versions.
4
Can CVE-2004-2504 be exploited remotely?
No, CVE-2004-2504 requires local access to the machine to exploit the vulnerability.
5
What type of vulnerability is CVE-2004-2504 classified as?
CVE-2004-2504 is classified as a privilege escalation vulnerability.