Description
The GUI in Alt-N Technologies MDaemon 7.2 and earlier, including 6.8, executes child processes such as NOTEPAD.EXE with SYSTEM privileges when users create new files, which allows local users with physical access to gain privileges.
References
- mdaemon-gain-privileges(18287) vdb-entry
- 1012350 vdb-entry
- 13225 third-party-advisory
- 20041129 Privilege escalation flaw in MDaemon 7.2. mailing-list
- 12158 vdb-entry
- 11736 vdb-entry
- 20041130 Re: Privilege escalation flaw in MDaemon 7.2. mailing-list
- 20041129 Privilege escalation flaw in MDaemon 7.2. mailing-list