CVE-2004-2303: Mtools Mformat

Low severity, CVSS 3.6. EPSS: 0.6% chance of exploitation in the next 30 days.

MTools Mformat before 3.9.9, when installed setuid root, creates files with world-readable and world-writable permissions, which allows local users to read and overwrite files.

Affected products

• Mtools Mformat: version 3.9.1 only; version 3.9.2 only; version 3.9.3 only; version 3.9.4 only; version 3.9.5 only; version 3.9.6 only; …

Published 2004-12-31. Last modified 2026-06-16.