CVE-2004-2303

CVE-2004-2303 describes a local privilege escalation vulnerability in MTools Mformat versions prior to 3.9.9. When Mformat is installed setuid root, it creates files with world-readable and world-writable permissions, enabling local users to read and overwrite arbitrary files. The vulnerability has a CVSS score of 3.6 (AV:L/AC:L/Au:N/C:P/I:P/A:N), indicating low attack complexity and partial impact on confidentiality and integrity, but no impact on availability. While not actively exploited in the wild and not on the KEV catalog, there is a public exploit available on ExploitDB (EDB-23759), though it has received minimal community discussion or media coverage.