CVE-2004-2504

CVE-2004-2504 describes a privilege escalation vulnerability in Alt-N Technologies MDaemon versions 7.2 and earlier, including 6.8. The graphical user interface (GUI) of the affected software executes child processes, such as NOTEPAD.EXE, with SYSTEM privileges when users create new files. This flaw allows local attackers with physical access to the system to gain elevated privileges. The vulnerability has a CVSS score of 7.2, indicating high severity, with a vector of AV:L/AC:L/Au:N/C:C/I:C/A:C. This means it requires local access and low attack complexity, but can lead to complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, and no exploit code is publicly available on platforms like Metasploit, Nuclei, or ExploitDB. The vulnerability has also received minimal community discussion or media coverage, suggesting low public awareness and limited current threat.