Login Request a demo
Unscored severity · published Sep 7, 2006
CVE-2006-4620
The useredit_account.wdm module in Alt-N WebAdmin 3.2.5 running with MDaemon 9.0.6, and possibly earlier versions, allows remote authenticated domain administrators to gain…
–
CVSS
1.2%
EPSS
No
On KEV
Description
The useredit_account.wdm module in Alt-N WebAdmin 3.2.5 running with MDaemon 9.0.6, and possibly earlier versions, allows remote authenticated domain administrators to gain privileges and obtain access to the system mail queue by modifying the mailbox of the MDaemon user account to use the mailbox of another account.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WE
Webadmin · Alt-n
through 3.2.5; 3.0.2; 3.0.3; 3.2.3; 3.2.4 · source: NVD
Affected product
WE
Webadmin
Alt-n
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-4620
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-4620
Patch
http://files.altn.com/WebAdmin/Release/RelNotes_en.txt
Patch
http://secunia.com/advisories/21727
securityreason.com
http://securityreason.com/securityalert/1516
www.osvdb.org
http://www.osvdb.org/28548
www.securityfocus.com
http://www.securityfocus.com/archive/1/445153/100/0/threaded
Patch
http://www.teklow.com/advisories/TTG0602.txt
More from Webadmin
–
CVE-2006-4371
Multiple directory traversal vulnerabilities in Alt-N WebAdmin 3.2.3 and 3.2.4 running with MDaemon 9.0.5, and possibly earlier, allow remote authenticated global administrators…
–
CVE-2006-4370
Alt-N WebAdmin 3.2.3 and 3.2.4 running with MDaemon 9.0.5, and possibly earlier, allow remote authenticated domain administrators to change a global administrator's password and…
–
CVE-2005-0319
Direct remote injection vulnerability in modalfram.wdm in Alt-N WebAdmin 3.0.4 allows remote attackers to load external webpages that appear to come from the WebAdmin server,…
–
CVE-2005-0317
Cross-site scripting (XSS) vulnerability in useredit_account.wdm in Alt-N WebAdmin 3.0.4 allows remote attackers to inject arbitrary web script or HTML via the user parameter
–
CVE-2005-0318
useredit_account.wdm in Alt-N WebAdmin 3.0.4 does not properly validate account edits by the logged in user, which allows remote authenticated users to edit other users' account…