CVE-2004-1313

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

The Smc.exe process in My Firewall Plus 5.0 build 1117, and possibly other versions, does not drop privileges before invoking help, which allows local users to gain privileges.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
Jan 10, 2005
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2004

CVE-2004-13147.5Safari 1.x allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is knowCVE-2004-13157.5viewtopic.php in phpBB 2.x before 2.0.11 improperly URL decodes the highlight parameter when extracting words and phrases to highlight, whicCVE-2004-13165.0Heap-based buffer overflow in MSG_UnEscapeSearchUrl in nsNNTPProtocol.cpp for Mozilla 1.7.3 and earlier allows remote attackers to cause a dCVE-2004-13177.5Stack-based buffer overflow in doexec.c in Netcat for Windows 1.1, when running with the -e option, allows remote attackers to execute arbitCVE-2004-13184.3Cross-site scripting (XSS) vulnerability in namazu.cgi for Namazu 2.0.13 and earlier allows remote attackers to inject arbitrary HTML and weCVE-2004-13195.0The DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject arbitrary web script into other domains by setting a name for a windoCVE-2004-13207.5Asante FM2008 running firmware 1.06 is shipped with a default username and password, which could allow remote attackers to gain unauthorizedCVE-2004-13217.5The configuration backup in Asante FM2008 running firmware 1.06 stores the username and password in cleartext, which could allow remote attaCVE-2004-13227.5Cisco Unity 2.x, 3.x, and 4.x, when integrated with Microsoft Exchange, has several hard coded usernames and passwords, which allows remote CVE-2004-13232.1Multiple syscalls in the compat subsystem for NetBSD before 2.0 allow local users to cause a denial of service (kernel crash) via a large siCVE-2004-13242.6The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zoneCVE-2004-13255.0The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file does not exist and the