low3.6Public exploit code
CVE-2004-2303
MTools Mformat before 3.9.9, when installed setuid root, creates files with world-readable and world-writable permissions, which allows local users to read and…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MTools 3.9.x - 'MFormat' Local Privilege Escalation2004-02-25 · local · linux · Verified
Impact
MTools Mformat before 3.9.9, when installed setuid root, creates files with world-readable and world-writable permissions, which allows local users to read and overwrite files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mtools | Mformat | Versions 3.9.1, 3.9.2, 3.9.3, 3.9.4, 3.9.5, 3.9.6 |
References
- NVD record
- CVE.org record
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:016
- http://www.securityfocus.com/bid/9746
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15317
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:016
- http://www.securityfocus.com/bid/9746
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15317