Vulnerabilities > ALT N > Mdaemon > 9.0.5

DATE CVE VULNERABILITY TITLE RISK
2009-08-13 CVE-2008-6967 Unspecified vulnerability in Alt-N Mdaemon and Worldclient
Multiple unspecified vulnerabilities in WorldClient in Alt-N MDaemon before 10.02 have unknown impact and attack vectors, probably related to cross-site scripting (XSS) and WorldClient DLL 10.0.1, a different vulnerability than CVE-2008-6893.
network
low complexity
alt-n
5.0
2006-11-17 CVE-2006-5968 Local Security vulnerability in Mdaemon
MDaemon 9.0.5, 9.0.6, 9.51, and 9.53, and possibly other versions, installs the MDaemon application folder with insecure permissions (Users create files/directories), which allows local users to execute arbitrary code by creating malicious RASAPI32.DLL or MPRAPI.DLL libraries in the MDaemon\APP folder, which is an untrusted search path element due to insecure permissions.
local
low complexity
alt-n
4.6
2006-11-04 CVE-2006-5708 Denial-Of-Service vulnerability in Mdaemon
Multiple unspecified vulnerabilities in MDaemon and WorldClient in Alt-N Technologies MDaemon before 9.50 allow attackers to cause a denial of service (memory consumption) via unspecified vectors resulting in memory leaks.
network
low complexity
alt-n
5.0
2006-08-27 CVE-2006-4364 Remote Pre-Authentication POP3 Buffer Overflow vulnerability in Alt-N MDaemon
Multiple heap-based buffer overflows in the POP3 server in Alt-N Technologies MDaemon before 9.0.6 allow remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via long strings that contain '@' characters in the (1) USER and (2) APOP commands.
network
low complexity
alt-n
5.0