{"id":"CVE-2004-2504","aliases":["EUVD-2004-2495","GHSA-wvcr-r9cr-2xrh"],"status":"published","title":"The GUI in Alt-N Technologies MDaemon 7.2 and earlier, including 6.8, executes child processes...","description":"The GUI in Alt-N Technologies MDaemon 7.2 and earlier, including 6.8, executes child processes such as NOTEPAD.EXE with SYSTEM privileges when users create new files, which allows local users with physical access to gain privileges.","severity":{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00484,"percentile":0.41939,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2004-12-31T05:00:00Z","modified":"2026-06-16T22:09:46Z","products":[{"vendor":"alt-n","product":"mdaemon"}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18287","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://securitytracker.com/id?1012350","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Exploit"]},{"url":"http://secunia.com/advisories/13225","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-11/1324.html","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Exploit"]},{"url":"http://www.osvdb.org/12158","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.securityfocus.com/bid/11736","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-11/1353.html","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-11/0385.html","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Exploit"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-2504"},{"url":"https://github.com/advisories/GHSA-wvcr-r9cr-2xrh"}],"sources":{"cve":[{"id":"CVE-2004-2504","description":"The GUI in Alt-N Technologies MDaemon 7.2 and earlier, including 6.8, executes child processes such as NOTEPAD.EXE with SYSTEM privileges when users create new files, which allows local users with physical access to gain privileges.","status":"published","published":"2005-10-25T04:00:00Z","modified":"2024-08-08T01:29:13.669Z","updated_at":"2026-11-02T14:34:53.357376Z"}],"euvd":[{"id":"EUVD-2004-2495","description":"The GUI in Alt-N Technologies MDaemon 7.2 and earlier, including 6.8, executes child processes such as NOTEPAD.EXE with SYSTEM privileges when users create new files, which allows local users with physical access to gain privileges.","status":"published","published":"2005-10-25T04:00:00Z","modified":"2024-08-08T01:29:13Z","updated_at":"2026-11-03T01:15:10.048939Z"}],"ghsa":[{"id":"GHSA-wvcr-r9cr-2xrh","title":"The GUI in Alt-N Technologies MDaemon 7.2 and earlier, including 6.8, executes child processes...","description":"The GUI in Alt-N Technologies MDaemon 7.2 and earlier, including 6.8, executes child processes such as NOTEPAD.EXE with SYSTEM privileges when users create new files, which allows local users with physical access to gain privileges.","status":"published","published":"2022-04-29T03:01:33Z","modified":"2023-01-30T05:04:09Z","updated_at":"2026-11-02T14:46:58.911326Z"}],"nvd":[{"id":"CVE-2004-2504","description":"The GUI in Alt-N Technologies MDaemon 7.2 and earlier, including 6.8, executes child processes such as NOTEPAD.EXE with SYSTEM privileges when users create new files, which allows local users with physical access to gain privileges.","status":"published","published":"2004-12-31T05:00:00Z","modified":"2026-06-16T22:09:46.63Z","cvss":[{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:53.133049Z"}]}}