CVE-2004-2303

Published: Dec 31, 2004Modified: Apr 16, 2026

3.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 3.9 / Impact: 4.9

Source: NVD

Description

MTools Mformat before 3.9.9, when installed setuid root, creates files with world-readable and world-writable permissions, which allows local users to read and overwrite files.

Affected (9)

Products: Mtools: Mformat

Mtools

1 product

Mformat

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Mtools Mformat	Version 3.9.1
Mtools Mformat	Version 3.9.2
Mtools Mformat	Version 3.9.3
Mtools Mformat	Version 3.9.4
Mtools Mformat	Version 3.9.5
Mtools Mformat	Version 3.9.6
Mtools Mformat	Version 3.9.7
Mtools Mformat	Version 3.9.8
Mtools Mformat	Version 3.9.9