What’s Vulnerable › Vulnerabilities

CVE-2004-2303

• Severity: low (CVSS 3.6 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2004-12-31 · updated 2026-06-16

Description

MTools Mformat before 3.9.9, when installed setuid root, creates files with world-readable and world-writable permissions, which allows local users to read and overwrite files.

Affected products

• Mtools Mformat: 3.9.1, 3.9.2, 3.9.3, 3.9.4, 3.9.5, 3.9.6 (+3)

References

• http://www.mandriva.com/security/advisories?name=MDKSA-2004:016
• http://www.securityfocus.com/bid/9746
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15317
• http://www.mandriva.com/security/advisories?name=MDKSA-2004:016
• http://www.securityfocus.com/bid/9746
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15317

Get alerted when CVE-2004-2303 or the next vulnerability affects your stack