Vulnerabilities > ALT N > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2009-08-13 | CVE-2008-6967 | Unspecified vulnerability in Alt-N Mdaemon and Worldclient Multiple unspecified vulnerabilities in WorldClient in Alt-N MDaemon before 10.02 have unknown impact and attack vectors, probably related to cross-site scripting (XSS) and WorldClient DLL 10.0.1, a different vulnerability than CVE-2008-6893. | 5.0 |
| 2009-08-03 | CVE-2008-6893 | Cross-Site Scripting vulnerability in Alt-N Worldclient 10.0.2 Cross-site scripting (XSS) vulnerability in Alt-N MDaemon WorldClient 10.0.2, when Internet Explorer 7 is used, allows remote attackers to inject arbitrary web script or HTML via a crafted img tag. | 4.3 |
| 2006-11-17 | CVE-2006-5968 | Local Security vulnerability in Mdaemon MDaemon 9.0.5, 9.0.6, 9.51, and 9.53, and possibly other versions, installs the MDaemon application folder with insecure permissions (Users create files/directories), which allows local users to execute arbitrary code by creating malicious RASAPI32.DLL or MPRAPI.DLL libraries in the MDaemon\APP folder, which is an untrusted search path element due to insecure permissions. | 4.6 |
| 2006-11-04 | CVE-2006-5708 | Denial-Of-Service vulnerability in Mdaemon Multiple unspecified vulnerabilities in MDaemon and WorldClient in Alt-N Technologies MDaemon before 9.50 allow attackers to cause a denial of service (memory consumption) via unspecified vectors resulting in memory leaks. | 5.0 |
| 2006-09-07 | CVE-2006-4620 | Unspecified vulnerability in Alt-N Webadmin The useredit_account.wdm module in Alt-N WebAdmin 3.2.5 running with MDaemon 9.0.6, and possibly earlier versions, allows remote authenticated domain administrators to gain privileges and obtain access to the system mail queue by modifying the mailbox of the MDaemon user account to use the mailbox of another account. | 4.6 |
| 2006-08-27 | CVE-2006-4364 | Remote Pre-Authentication POP3 Buffer Overflow vulnerability in Alt-N MDaemon Multiple heap-based buffer overflows in the POP3 server in Alt-N Technologies MDaemon before 9.0.6 allow remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via long strings that contain '@' characters in the (1) USER and (2) APOP commands. | 5.0 |
| 2006-08-26 | CVE-2006-4371 | Information Disclosure vulnerability in Alt-N Webadmin 3.2.3/3.2.4 Multiple directory traversal vulnerabilities in Alt-N WebAdmin 3.2.3 and 3.2.4 running with MDaemon 9.0.5, and possibly earlier, allow remote authenticated global administrators to read arbitrary files via a .. | 4.0 |
| 2006-02-28 | CVE-2006-0925 | Remote Format String vulnerability in Alt-N MDaemon IMAP Server Format string vulnerability in the IMAP4rev1 server in Alt-N MDaemon 8.1.1 and possibly 8.1.4 allows remote attackers to cause a denial of service (CPU consumption) by creating and then listing folders whose names contain format string specifiers. | 5.0 |
| 2005-12-13 | CVE-2005-4209 | Code Injection vulnerability in Alt-N Mdaemon and Worldclient WorldClient webmail in Alt-N MDaemon 8.1.3 allows remote attackers to prevent arbitrary users from accessing their inboxes via script tags in the Subject header of an e-mail message, which prevents the user from being able to access the Inbox folder, possibly due to a cross-site scripting (XSS) vulnerability. | 4.3 |
| 2005-01-28 | CVE-2005-0319 | Remote vulnerability in Alt-N Webadmin 3.0.3 Direct remote injection vulnerability in modalfram.wdm in Alt-N WebAdmin 3.0.4 allows remote attackers to load external webpages that appear to come from the WebAdmin server, which allows remote attackers to inject arbitrary HTML or web script to facilitate cross-site scripting (XSS) and phishing attacks. network alt-n | 4.3 |