CVE-2004-2303

Опубликовано: 31 дек. 2004

Источник: nvd

CVSS2: 3.6

EPSS Низкий

Описание

MTools Mformat before 3.9.9, when installed setuid root, creates files with world-readable and world-writable permissions, which allows local users to read and overwrite files.

Ссылки

http://www.mandriva.com/security/advisories?name=MDKSA-2004:016
Patch
Vendor Advisory
http://www.securityfocus.com/bid/9746
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15317
http://www.mandriva.com/security/advisories?name=MDKSA-2004:016
Patch
Vendor Advisory
http://www.securityfocus.com/bid/9746
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15317

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mtools:mformat:3.9.1:*:*:*:*:*:*:*

cpe:2.3:a:mtools:mformat:3.9.2:*:*:*:*:*:*:*

cpe:2.3:a:mtools:mformat:3.9.3:*:*:*:*:*:*:*

cpe:2.3:a:mtools:mformat:3.9.4:*:*:*:*:*:*:*

cpe:2.3:a:mtools:mformat:3.9.5:*:*:*:*:*:*:*

cpe:2.3:a:mtools:mformat:3.9.6:*:*:*:*:*:*:*

cpe:2.3:a:mtools:mformat:3.9.7:*:*:*:*:*:*:*

cpe:2.3:a:mtools:mformat:3.9.8:*:*:*:*:*:*:*

cpe:2.3:a:mtools:mformat:3.9.9:*:*:*:*:*:*:*

EPSS

Процентиль: 52%

0.00287

Низкий

3.6 Low

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2004-2303

debian

почти 21 год назад

MTools Mformat before 3.9.9, when installed setuid root, creates files ...

GHSA-5hvr-27m8-r592

github

больше 3 лет назад